Static task
static1
Behavioral task
behavioral1
Sample
3fdf481857d7c11661a8890bf743c62482a90a5d12bc225ebccfdbcfd07861a0.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
3fdf481857d7c11661a8890bf743c62482a90a5d12bc225ebccfdbcfd07861a0.exe
Resource
win10v2004-20220812-en
General
-
Target
3fdf481857d7c11661a8890bf743c62482a90a5d12bc225ebccfdbcfd07861a0
-
Size
200KB
-
MD5
0c08f0a05e1eda22bf6082c21757ad79
-
SHA1
9d66e897e82709e1da1b5dae32efbafeb413fe3e
-
SHA256
3fdf481857d7c11661a8890bf743c62482a90a5d12bc225ebccfdbcfd07861a0
-
SHA512
ecbf74dd2973163708d90b0f4389a92aa41eef414f8731c83ab7b4be06bc5b32ac90657860d0acefcc2453330077fc80347f19299d46b507484ed84b3e3f1a6f
-
SSDEEP
3072:z0fk6Ag0rSB+9XkFYISIWCBeGRb46vY2eJJOr5o6914xXm16f6aMS88F:zk9Aj6YIMiGwr5hkans
Malware Config
Signatures
Files
-
3fdf481857d7c11661a8890bf743c62482a90a5d12bc225ebccfdbcfd07861a0.exe windows x86
b7ec3e1442cff828d6b240c1ebb98a7f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetThreadLocale
GetOEMCP
GetCurrentThread
SetCurrentDirectoryA
GetUserDefaultLangID
GlobalFindAtomA
GetVersion
Sleep
MulDiv
CopyFileA
GetProcessHeap
QueryPerformanceCounter
lstrcmpA
RemoveDirectoryA
GlobalFindAtomW
GetCurrentThreadId
lstrlenW
DeleteFileA
GetTickCount
GetModuleHandleW
SetLastError
GetCommandLineA
lstrcmpiA
GetWindowsDirectoryA
IsDebuggerPresent
GetModuleHandleA
GetCurrentProcessId
GetCommandLineW
lstrcmpiW
GetDriveTypeA
GetConsoleOutputCP
GetCurrentProcess
lstrlenA
LoadLibraryW
GetLastError
GetACP
DeleteFileW
GetStartupInfoA
VirtualAlloc
user32
GetSystemMetrics
GetDesktopWindow
GetDC
CharNextA
Sections
.text Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 45KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 112KB - Virtual size: 111KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE