Static task
static1
Behavioral task
behavioral1
Sample
3e4c62dfd0d9c804ed63cae06859e2da1a34e62ff90311b7c3889217f28f87ea.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
3e4c62dfd0d9c804ed63cae06859e2da1a34e62ff90311b7c3889217f28f87ea.exe
Resource
win10v2004-20220901-en
General
-
Target
3e4c62dfd0d9c804ed63cae06859e2da1a34e62ff90311b7c3889217f28f87ea
-
Size
573KB
-
MD5
0c62e0292c6161a60323d7bb3193a0b0
-
SHA1
8e685ed4300a5151739edd44906adbee7e43b6be
-
SHA256
3e4c62dfd0d9c804ed63cae06859e2da1a34e62ff90311b7c3889217f28f87ea
-
SHA512
2817ee2563cf9f3946fb47c90c89306d7a4d60040d97cde9ec0fb829a3ef40b8c8aafd54efe28eddd10587240a056f925a0e2ac6d31fad080626d60df1b93b3e
-
SSDEEP
12288:Ptv73hesjGH5ZzcMGZNVUlixxhee8n3tPDva2p2vET9V:Vv73NMd8xGndtppH
Malware Config
Signatures
Files
-
3e4c62dfd0d9c804ed63cae06859e2da1a34e62ff90311b7c3889217f28f87ea.exe windows x86
c77bf8efde03d347a9898edefee8470b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
CloseHandle
CreateDirectoryA
CreateFileA
CreateFileMappingA
CreateProcessA
DeleteCriticalSection
DeleteFileA
EnterCriticalSection
ExitProcess
FreeLibrary
GetCommandLineA
GetExitCodeProcess
GetFileSize
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetStartupInfoA
GetTempFileNameA
GetTempPathA
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
LocalAlloc
LocalFree
MapViewOfFile
SetConsoleCtrlHandler
SetCurrentDirectoryA
SetEnvironmentVariableA
SetUnhandledExceptionFilter
TlsGetValue
UnmapViewOfFile
VirtualProtect
VirtualQuery
WaitForSingleObject
WriteFile
lstrcatA
lstrcpyA
lstrlenA
msvcrt
__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
_snprintf
_winmajor
abort
atexit
calloc
free
fwrite
memcpy
signal
strchr
strncpy
vfprintf
shell32
SHFileOperationA
user32
MessageBoxA
Sections
.text Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 112B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.eh_fram Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 836B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE