Static task
static1
Behavioral task
behavioral1
Sample
d3c3b67a1690b3a9066e9e3bee674b64b2f7fbbea421d65e41a469bd949b791a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d3c3b67a1690b3a9066e9e3bee674b64b2f7fbbea421d65e41a469bd949b791a.exe
Resource
win10v2004-20220812-en
General
-
Target
d3c3b67a1690b3a9066e9e3bee674b64b2f7fbbea421d65e41a469bd949b791a
-
Size
799KB
-
MD5
51e5f556702b9960becfc39d957ff370
-
SHA1
ce6f50c62723f6f92a702f37d9c822026555c2f2
-
SHA256
d3c3b67a1690b3a9066e9e3bee674b64b2f7fbbea421d65e41a469bd949b791a
-
SHA512
d2b7b66cc15d9b9af7d7e87c9df9beb2459cdf9765f3d678ca322ffe212eaca1afe78577bb58ac980930515fca030a2f3ba03bb04efa08bae55e4c6ccd722dc6
-
SSDEEP
12288:IRvKFCNf/BKUJDOiyEZDZarszsQB+28BihBnFkqXJzYfy1KJ4V8ut:UvzYUJDAW6qf6iJpYfy1DV
Malware Config
Signatures
Files
-
d3c3b67a1690b3a9066e9e3bee674b64b2f7fbbea421d65e41a469bd949b791a.exe windows x86
c5abb4f8440b8cd488757123914b8028
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
CreateDirectoryW
HeapFree
GetVersionExA
DeviceIoControl
GetPrivateProfileIntA
GetPrivateProfileSectionA
GetStringTypeA
CloseHandle
GetDriveTypeA
GlobalFlags
LoadLibraryA
GetFileAttributesW
FindVolumeClose
GetStdHandle
RemoveDirectoryA
GetCurrentProcess
GetCurrentThread
GlobalLock
CreateEventA
GetFileAttributesW
VirtualProtectEx
shell32
DragFinish
StrChrA
SHFree
ExtractIconA
SHGetSettings
ShellMessageBoxA
DragQueryFileA
DuplicateIcon
DragAcceptFiles
DllUnregisterServer
ShellAboutA
DllUnregisterServer
SHGetMalloc
ntmarta
AccFreeIndexArray
AccConvertAclToAccess
AccConvertSDToAccess
AccGetExplicitEntries
uxtheme
CloseThemeData
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 508B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 789KB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.import Size: 512B - Virtual size: 372B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ