Static task
static1
Behavioral task
behavioral1
Sample
3b3c81855519147b72a208a5718ff3d4605527b083dfca3efb76f35fe20b7ef1.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
3b3c81855519147b72a208a5718ff3d4605527b083dfca3efb76f35fe20b7ef1.exe
Resource
win10v2004-20220812-en
General
-
Target
3b3c81855519147b72a208a5718ff3d4605527b083dfca3efb76f35fe20b7ef1
-
Size
84KB
-
MD5
a2eab226d3c2edcc398c79219b6fcbd0
-
SHA1
c93d441ec93957368655e0c45a1f0b12a655df44
-
SHA256
3b3c81855519147b72a208a5718ff3d4605527b083dfca3efb76f35fe20b7ef1
-
SHA512
4f2c64934445171242b98b5febf44ba522b60c585db3e59e112b13974437bf8e0f8c7534218bdc1882eae7f570ba353d9cddb0d632477d923e6cdc3259e2964f
-
SSDEEP
768:xma5vm12sCiPoSrlvlrlWlBm7TTvdYBLiKrNIr+ktsohU9qSKiH:xDtArwGSLiWTohUM3iH
Malware Config
Signatures
Files
-
3b3c81855519147b72a208a5718ff3d4605527b083dfca3efb76f35fe20b7ef1.exe windows x86
132d626adb24b02db814ece900a42f40
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WaitForSingleObject
GetLastError
CreateProcessA
TerminateProcess
OpenProcess
LCMapStringW
LCMapStringA
GetStringTypeW
MultiByteToWideChar
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
RtlUnwind
CloseHandle
WriteFile
ReadFile
SetFilePointer
SetHandleCount
GetStdHandle
GetFileType
CreateFileA
HeapFree
RaiseException
GetCurrentProcess
HeapReAlloc
HeapAlloc
HeapSize
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
SetStdHandle
FlushFileBuffers
SetEndOfFile
VirtualAlloc
IsBadWritePtr
SetUnhandledExceptionFilter
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
IsBadReadPtr
IsBadCodePtr
GetStringTypeA
user32
GetWindowThreadProcessId
FindWindowA
Sections
.text Size: 48KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 24KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE