Static task
static1
Behavioral task
behavioral1
Sample
3e12e827308df46993361a56a16c32756f7b8369e6732c49a3ba0b8a5ae5c300.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
3e12e827308df46993361a56a16c32756f7b8369e6732c49a3ba0b8a5ae5c300.exe
Resource
win10v2004-20220812-en
General
-
Target
3e12e827308df46993361a56a16c32756f7b8369e6732c49a3ba0b8a5ae5c300
-
Size
801KB
-
MD5
9395c7fb30067b4008ee60761d4aa770
-
SHA1
28231e4b8d9c558c09b96e7295fffe4c31839d41
-
SHA256
3e12e827308df46993361a56a16c32756f7b8369e6732c49a3ba0b8a5ae5c300
-
SHA512
5248db8ae47a6c2f8793d3c97eb5693ed6a4ad86b000c8f9e302d44dc88fb6f37fc679c2a92ef965794388b62520b443999e6e1f8509f066447b67a514a46091
-
SSDEEP
24576:htrIwXlRmSE/H/mdER1PTtDoE79nmT89gi:htrIw1YDwc9TtM29nn9gi
Malware Config
Signatures
Files
-
3e12e827308df46993361a56a16c32756f7b8369e6732c49a3ba0b8a5ae5c300.exe windows x86
b88059f640ccef21caf4ac3ac788c329
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetProcessHeap
GetProcessVersion
DeviceIoControl
HeapFree
GetPrivateProfileIntW
FindAtomA
GetDriveTypeA
DeleteFileA
TlsGetValue
GetPrivateProfileSectionA
CreateEventW
SuspendThread
lstrlenA
GetCurrentThread
VirtualProtectEx
CreateEventW
SetLastError
GetStringTypeW
LoadLibraryW
ResumeThread
DeviceIoControl
clbcatq
DllGetClassObject
DllGetClassObject
SetSetupSave
CheckMemoryGates
ComPlusMigrate
SetupOpen
ComPlusMigrate
SetupOpen
SetSetupSave
CheckMemoryGates
SetupOpen
ComPlusMigrate
CheckMemoryGates
pdh
PdhAddCounterA
PdhCloseLog
PdhGetLogFileSize
PdhGetLogFileTypeA
Sections
.text Size: 1024B - Virtual size: 896B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 1.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 794KB - Virtual size: 794KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.orpc Size: 512B - Virtual size: 192B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ