Static task
static1
Behavioral task
behavioral1
Sample
3de75bed7a2af28bb496ca9172b715166610c075549f5610538154d38791328a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
3de75bed7a2af28bb496ca9172b715166610c075549f5610538154d38791328a.exe
Resource
win10v2004-20220812-en
General
-
Target
3de75bed7a2af28bb496ca9172b715166610c075549f5610538154d38791328a
-
Size
301KB
-
MD5
92efb8ad4810823b273cc88c4b38c772
-
SHA1
e7b0709d40e378056627df5f4fe2d34d511b1c11
-
SHA256
3de75bed7a2af28bb496ca9172b715166610c075549f5610538154d38791328a
-
SHA512
bcbfedaa85ab58c08cf89957f2a2184d97836cededb68b216070e5c113c627d2c9b4e0b83b09416d7665f0f915cef1aceeabacd4930bc81868ccd2ed2b4c67b5
-
SSDEEP
6144:cCeX9fK3t+CaYTw2TSR1u9kLkFY0YGbCNpHwjdvkrUk:XeXo3t+FYTw2uR1u9kIFYK2pHw9kr1
Malware Config
Signatures
Files
-
3de75bed7a2af28bb496ca9172b715166610c075549f5610538154d38791328a.exe windows x86
1da63bbec2bcfef37560ae7b0dc3e55e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualFree
GetModuleHandleA
FindFirstVolumeW
FindNextVolumeW
CloseHandle
GetFullPathNameW
GetConsoleMode
ReadConsoleA
GetStringTypeA
GetFullPathNameW
Sleep
GetVolumePathNameW
CopyFileA
WaitForMultipleObjects
CreateSemaphoreA
CloseHandle
OpenMutexW
GetEnvironmentVariableW
GetModuleHandleW
HeapCreate
CloseHandle
SetVolumeLabelA
GetCurrentDirectoryA
dbghelp
ImageRvaToSection
ImageRvaToVa
ImageNtHeader
FindFileInPath
Sections
.text Size: 5KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_WRITE
.RES Size: 292KB - Virtual size: 296KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE