Static task
static1
Behavioral task
behavioral1
Sample
3d189cba0e563642ed6fd5a89bc504c5f6a38f596a034363e6830066f509ec99.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
3d189cba0e563642ed6fd5a89bc504c5f6a38f596a034363e6830066f509ec99.exe
Resource
win10v2004-20220901-en
General
-
Target
3d189cba0e563642ed6fd5a89bc504c5f6a38f596a034363e6830066f509ec99
-
Size
308KB
-
MD5
9b5287708a0432610f4893216454bdd3
-
SHA1
cc6808a24d1870973619a82f6956470a2462314f
-
SHA256
3d189cba0e563642ed6fd5a89bc504c5f6a38f596a034363e6830066f509ec99
-
SHA512
9ada4587ec66d6f2b2704d93e92781f690d882dbed556da51c78e97d3cbda503f8ad2e295ee538748f231c1ee9a7ecf40bc219014e18d0e3a1a5b46cdd69721a
-
SSDEEP
6144:Oa08Vfge2so7ok3AYKBmVgjZZ4etSvCzd4nr2GvKR7YOcd:OaNVb2soMqfNetX0NKR7L
Malware Config
Signatures
Files
-
3d189cba0e563642ed6fd5a89bc504c5f6a38f596a034363e6830066f509ec99.exe windows x86
c71d01f5fca620919e124a3a5809477a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
FindResourceW
GetModuleHandleA
GetLastError
IsBadWritePtr
GetExitCodeProcess
SetFileTime
lstrcatA
CreatePipe
CreateMutexW
HeapCreate
CloseHandle
GetFileSize
FormatMessageW
LoadLibraryA
GetStartupInfoW
LeaveCriticalSection
SetFileTime
SetFileTime
lstrcpyA
InitializeCriticalSection
ReadFile
mstscax
DllCanUnloadNow
DllUnregisterServer
DllRegisterServer
DllGetClassObject
user32
LoadCursorW
IsDialogMessageA
IsWindow
MessageBoxA
PeekMessageW
GetWindowLongW
wsprintfA
GetWindowRect
PostMessageW
GetWindowTextA
DispatchMessageA
PostMessageA
SetFocus
clbcatq
SetSetupSave
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rich Size: 1KB - Virtual size: 193B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 293KB - Virtual size: 293KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ole Size: 512B - Virtual size: 112B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE