Static task
static1
Behavioral task
behavioral1
Sample
e3b39e736edca9f95cf0f8bdb534dac5ecfd64f97827e8ee9ef2b45699320524.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
e3b39e736edca9f95cf0f8bdb534dac5ecfd64f97827e8ee9ef2b45699320524.exe
Resource
win10v2004-20220812-en
General
-
Target
e3b39e736edca9f95cf0f8bdb534dac5ecfd64f97827e8ee9ef2b45699320524
-
Size
2.0MB
-
MD5
c50f9f32318d59b6b8fee809e3c6d222
-
SHA1
675d354820f43dc1286c714bfe47488ceb99fa2d
-
SHA256
e3b39e736edca9f95cf0f8bdb534dac5ecfd64f97827e8ee9ef2b45699320524
-
SHA512
217d428157df5b1b06d679fb984d24bc88b4d49836e058381d602f0e4a3231e816a86e5057194c1d3560ae470bf7f2e1f3788769f64935ff1db8b9d166eb213f
-
SSDEEP
49152:d1H4zsQTsrZrdiuUqSp6a3oVCrqB+cLdy3b/xpXV:dWzsQGrdDUqy6aYV7B+cg3z
Malware Config
Signatures
Files
-
e3b39e736edca9f95cf0f8bdb534dac5ecfd64f97827e8ee9ef2b45699320524.exe windows x86
a98f7a0e13d47e1a82f9a8ded223eef3
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
oleaut32
SysFreeString
advapi32
RegQueryValueExA
user32
GetKeyboardType
gdi32
WidenPath
version
VerQueryValueA
ole32
CreateILockBytesOnHGlobal
comctl32
_TrackMouseEvent
urlmon
URLDownloadToFileA
wininet
InternetGetConnectedState
shell32
ShellExecuteA
winspool.drv
OpenPrinterA
comdlg32
ChooseColorA
wsock32
WSACleanup
msvcrt
_gcvt
libeay32
PEM_read_bio_PrivateKey
netapi32
Netbios
winmm
sndPlaySoundA
syunew3d
YWriteString
mwrf32
rf_beep
Sections
.text Size: 2.0MB - Virtual size: 8.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 40KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE