Static task
static1
Behavioral task
behavioral1
Sample
3b1663bc0a85adef04a917e7da5d2c6e131e23dd359a11734c865ffd0c9f5edc.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
3b1663bc0a85adef04a917e7da5d2c6e131e23dd359a11734c865ffd0c9f5edc.exe
Resource
win10v2004-20220812-en
General
-
Target
3b1663bc0a85adef04a917e7da5d2c6e131e23dd359a11734c865ffd0c9f5edc
-
Size
286KB
-
MD5
0cd5e7f9d7ae8ad7a5acf40096a88ec2
-
SHA1
65cf0e59155b7664fa2c942b3f1558abc66ec3c7
-
SHA256
3b1663bc0a85adef04a917e7da5d2c6e131e23dd359a11734c865ffd0c9f5edc
-
SHA512
6fed7a0dd77e9e1a43c528b6b4653a463ac938d13f1cb9b8130c9e3160833fb2d6f3aaa1c84d6ac9acd2664ba75eaf2a92157b8cf9b684633e9bc3598e994363
-
SSDEEP
6144:Vyapaq24z14WX47WyL7R1Tftpc85qR62fgO9OVrPcvikDJ6wMJXNq43:VrD19XmB085A6Ol9Hes0
Malware Config
Signatures
Files
-
3b1663bc0a85adef04a917e7da5d2c6e131e23dd359a11734c865ffd0c9f5edc.exe windows x86
0b60002b84d8b12a25ddebe8743b4f9b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
memset
memcpy
strcmp
memmove
fabs
ceil
malloc
floor
free
strlen
strcpy
strcat
memcmp
_CIexp
_CIpow
fseek
ftell
fread
fclose
realloc
__p__iob
_fileno
_setmode
calloc
ferror
_fstat
feof
fopen
qsort
fprintf
_CIlog
frexp
memchr
kernel32
GetModuleHandleA
HeapCreate
HeapDestroy
ExitProcess
lstrcmpA
HeapAlloc
HeapFree
CloseHandle
WriteFile
InitializeCriticalSection
GetModuleFileNameA
TlsAlloc
LoadLibraryA
GetProcAddress
FreeLibrary
GetVersionExA
CreateFileA
SetFilePointer
SetEndOfFile
GetFileSize
ReadFile
WideCharToMultiByte
HeapReAlloc
user32
DestroyIcon
FillRect
gdi32
GetDeviceCaps
GetObjectType
DeleteObject
GetObjectA
CreateCompatibleDC
GetDIBits
DeleteDC
CreateDIBSection
SelectObject
BitBlt
CreateBitmap
SetPixel
GetStockObject
Sections
.code Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 43KB - Virtual size: 43KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE