Static task
static1
Behavioral task
behavioral1
Sample
3c916ed6e0edfdd0399b4039b8a4bf1a0c872b94181a7aa82185df30cfac0dab.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
3c916ed6e0edfdd0399b4039b8a4bf1a0c872b94181a7aa82185df30cfac0dab.exe
Resource
win10v2004-20220812-en
General
-
Target
3c916ed6e0edfdd0399b4039b8a4bf1a0c872b94181a7aa82185df30cfac0dab
-
Size
811KB
-
MD5
aec50c39910c2a0c1fbab1b50f9c9ec9
-
SHA1
5ecc9fc0e5f4dc14b158a9dd420e9bed19931980
-
SHA256
3c916ed6e0edfdd0399b4039b8a4bf1a0c872b94181a7aa82185df30cfac0dab
-
SHA512
ed8b948b5dd1fd11c583035cd0091c4e28ac814ab7e951e7ecc8fad541819ef260e8b9d111f6f06ff964b7fbe2b6e480bbdd2aab1424aa99a169030e12da1e9c
-
SSDEEP
24576:IKs3du8h3DmQF66sW76pdsINsT53atTUKyXsxMsu1:TS3FfsW74mINs16TUp8
Malware Config
Signatures
Files
-
3c916ed6e0edfdd0399b4039b8a4bf1a0c872b94181a7aa82185df30cfac0dab.exe windows x86
631d30c06362cf6e0a1414ba4a89f5d3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
CloseHandle
SetFileTime
GetModuleHandleA
InterlockedExchange
CreateEventA
GetLastError
SetConsoleTitleA
GetFileSize
IsBadWritePtr
GetStartupInfoW
GetStringTypeA
HeapCreate
LoadLibraryA
HeapSize
lstrcatA
SetFileTime
ReadFile
lstrcpyW
SetFileTime
GetExitCodeProcess
LeaveCriticalSection
mstscax
DllCanUnloadNow
DllUnregisterServer
DllGetClassObject
DllRegisterServer
shell32
SHGetSettings
ExtractIconA
DllUnregisterServer
StrChrA
SHGetDiskFreeSpaceA
DuplicateIcon
SHFree
SHGetMalloc
DragQueryFileA
DragFinish
ShellMessageBoxW
DragAcceptFiles
ShellAboutA
rasapi32
DwRasUninitialize
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 288B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rich Size: 1KB - Virtual size: 176B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ole Size: 512B - Virtual size: 95B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 798KB - Virtual size: 798KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ