Static task
static1
Behavioral task
behavioral1
Sample
3e71ab9be405752caa18b01a0b3c7a3fcba0ebe75d33efaa605075c9f0e9dde3.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
3e71ab9be405752caa18b01a0b3c7a3fcba0ebe75d33efaa605075c9f0e9dde3.exe
Resource
win10v2004-20220812-en
General
-
Target
3e71ab9be405752caa18b01a0b3c7a3fcba0ebe75d33efaa605075c9f0e9dde3
-
Size
82KB
-
MD5
a005c66d470d8ea8eb77cf6899748d00
-
SHA1
5a92a431918f31358258ca2b015fdcc3f744ef7c
-
SHA256
3e71ab9be405752caa18b01a0b3c7a3fcba0ebe75d33efaa605075c9f0e9dde3
-
SHA512
fd69fc0b711c5a59f31f4354d1dc31e0740dfd67cd0e72d8799d1f84588d31df7cd9995f5273a70ac01331d230ae5f0128f2e2c0cd3fb2b5fe89262072d45223
-
SSDEEP
1536:L0fPzVot0tFEPplEH3DkviDAiQX/IO2nToIft4NfOaZ:L0zVodbEH3DagAioxiTBft45OaZ
Malware Config
Signatures
Files
-
3e71ab9be405752caa18b01a0b3c7a3fcba0ebe75d33efaa605075c9f0e9dde3.exe windows x86
d33ca29a59a41b052f66b17ffa17cc9d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
CloseHandle
SetEvent
Sleep
GetTickCount
ExitThread
CreateThread
FreeLibrary
GetProcAddress
LoadLibraryA
GetCurrentProcessId
GetProcessHeap
GetCurrentThreadId
CreateProcessA
TerminateProcess
GetLastError
lstrcpyA
TerminateThread
OutputDebugStringA
InterlockedExchange
lstrlenA
GlobalMemoryStatus
GetSystemInfo
GetCurrentProcess
LoadLibraryW
GetStartupInfoA
GetModuleHandleA
RaiseException
LocalAlloc
msvcrt
__CxxFrameHandler
??2@YAPAXI@Z
strstr
rand
sprintf
atoi
strncpy
strcspn
malloc
strchr
strrchr
exit
_except_handler3
strncat
realloc
free
strncmp
_beginthreadex
??1type_info@@UAE@XZ
_iob
_exit
_XcptFilter
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
_ftol
ceil
memmove
??3@YAXPAX@Z
_CxxThrowException
_strnicmp
urlmon
URLDownloadToFileA
Sections
.text Size: 54KB - Virtual size: 54KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 22KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ