Static task
static1
Behavioral task
behavioral1
Sample
f3af0c6091c7f2e9fdedfa827c1b173093ff529808e581470745cecf3f3ee2d6.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f3af0c6091c7f2e9fdedfa827c1b173093ff529808e581470745cecf3f3ee2d6.exe
Resource
win10v2004-20220812-en
General
-
Target
f3af0c6091c7f2e9fdedfa827c1b173093ff529808e581470745cecf3f3ee2d6
-
Size
816KB
-
MD5
81ff4884ff90b08ce58095330d0d5931
-
SHA1
8ecb436dad2d6396c88eb09cb2d64c3b829841a1
-
SHA256
f3af0c6091c7f2e9fdedfa827c1b173093ff529808e581470745cecf3f3ee2d6
-
SHA512
3b27a7b74f46220f6e97f1c68bfb57e5a85013608e92880edcaab982522553aeef01536b56d0b2c932ca6493f45d91c0a0c3803532abcea5931a7888214d487b
-
SSDEEP
24576:opwd6gar5rD7Fgj4BwLVf/KOo1LBgWyGpaz:oPgaZFgsBwLVf/g1LBg
Malware Config
Signatures
Files
-
f3af0c6091c7f2e9fdedfa827c1b173093ff529808e581470745cecf3f3ee2d6.exe windows x86
845e8fdabb5b20116b5119be28502539
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateSemaphoreA
GetCurrentDirectoryW
MoveFileA
GetLastError
GetFileTime
GetLastError
LoadLibraryA
GetLastError
lstrlenW
GetVolumeInformationW
GetConsoleTitleA
CreateMutexA
GetLastError
GetLastError
VirtualProtect
GetLastError
GetLastError
objsel
DllUnregisterServer
DllRegisterServer
DllCanUnloadNow
DllGetClassObject
Sections
.play Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.odata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_WRITE
.DATA Size: 801KB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE