Static task
static1
Behavioral task
behavioral1
Sample
3fb780a1ce1b41f9791f278a799cca2747e9439802debacf6abbb7d76cea62ca.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
3fb780a1ce1b41f9791f278a799cca2747e9439802debacf6abbb7d76cea62ca.exe
Resource
win10v2004-20220812-en
General
-
Target
3fb780a1ce1b41f9791f278a799cca2747e9439802debacf6abbb7d76cea62ca
-
Size
254KB
-
MD5
a3173e4c51e4a7c6149ca7351f28d960
-
SHA1
7af63a9c478105738190c84090c10450746c63e2
-
SHA256
3fb780a1ce1b41f9791f278a799cca2747e9439802debacf6abbb7d76cea62ca
-
SHA512
130165a649f621b567a2ad592196e30241b65a725dc404116a803ead82f20b6ada81d757cda81f5d32e311d01237ee376d7beccec661332bec7142ba4f01cd8e
-
SSDEEP
6144:NYmDwRIfStHtI+OkX4VWIS0cz4XuWUkg/7WC:NVDwWfStH+fVjSxz4+7yC
Malware Config
Signatures
Files
-
3fb780a1ce1b41f9791f278a799cca2747e9439802debacf6abbb7d76cea62ca.exe windows x86
a3a257e5cb1bf88bd8baa6fca479c8d4
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect
user32
EndPaint
gdi32
BitBlt
advapi32
OpenProcessToken
ws2_32
WSAStartup
Sections
JJIFDFDF Size: - Virtual size: 672KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
JJIFDFDF Size: 253KB - Virtual size: 256KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE