Static task
static1
Behavioral task
behavioral1
Sample
3950ec9574cd047268eb5586a23368ceef120febbd2157de7c9c118a9f4c570a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
3950ec9574cd047268eb5586a23368ceef120febbd2157de7c9c118a9f4c570a.exe
Resource
win10v2004-20220812-en
General
-
Target
3950ec9574cd047268eb5586a23368ceef120febbd2157de7c9c118a9f4c570a
-
Size
333KB
-
MD5
327a55cb763f63cd40446c07bb2a95ee
-
SHA1
04b1ae7589bb125ecdc625e13a38a6f6735d88e6
-
SHA256
3950ec9574cd047268eb5586a23368ceef120febbd2157de7c9c118a9f4c570a
-
SHA512
fb5d7ce26b9bac056fb5c3807dab6ca6cd97860c6c5fae009d0e5877f0f45d9653c17d87d5aa2c0ad2eb817ac81fffc5896dd6c28303d8b93f933279138ab44f
-
SSDEEP
6144:eZd3JkRXdtHvN0qYMRg62aWpGQ2nrfDk6HPTuMDHoPrvhbfBn2xkiC7Zp:idEDvNmMyqf17uMDIz/nokiC7
Malware Config
Signatures
Files
-
3950ec9574cd047268eb5586a23368ceef120febbd2157de7c9c118a9f4c570a.exe windows x86
e70953ccd5bfee8002e31268db876543
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteCriticalSection
GetSystemDefaultLCID
LocalFlags
CreateMutexA
LocalHandle
GetCPInfoExA
GlobalHandle
GetStringTypeW
LocalSize
CreateEventA
GetUserDefaultLCID
HeapReAlloc
VirtualFree
CreateSemaphoreA
GetStringTypeA
GetProcAddress
ReleaseMutex
OpenMutexA
SetEvent
OpenEventA
VirtualAllocEx
CloseHandle
PulseEvent
ResetEvent
ResumeThread
SuspendThread
GetModuleHandleA
GetStartupInfoA
netapi32
NetErrorLogWrite
NetAuditWrite
NetConnectionEnum
NetConfigSet
NetGetJoinableOUs
NetAuditRead
NetFileEnum
NetErrorLogClear
NetAuditClear
NetGroupAddUser
NetConfigGet
NetErrorLogRead
NetGetJoinInformation
msvcrt
_acmdln
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_exit
_XcptFilter
exit
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 312KB - Virtual size: 312KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ