Static task
static1
Behavioral task
behavioral1
Sample
3beb329a529e3a80cd3193fcf3b4243ffae83ca9a1677ed2ff2d5fe5a52a1588.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
3beb329a529e3a80cd3193fcf3b4243ffae83ca9a1677ed2ff2d5fe5a52a1588.exe
Resource
win10v2004-20220812-en
General
-
Target
3beb329a529e3a80cd3193fcf3b4243ffae83ca9a1677ed2ff2d5fe5a52a1588
-
Size
767KB
-
MD5
22f165cf21621bb63bc2e924cc25c1b7
-
SHA1
872bbdad6bc814aabc1e1620c96803e988f87191
-
SHA256
3beb329a529e3a80cd3193fcf3b4243ffae83ca9a1677ed2ff2d5fe5a52a1588
-
SHA512
44c0c2daeefd94c85760f3858494ffcd20b6fc897f0309e80a049ed23d64c617c4ffb846b5ca9a1f0ce8d12bbb3205335e08727b5909964e67a8c0fd50260a66
-
SSDEEP
12288:ED8ZUOMAj6BotfIw4gEd7QhfAsE/m+kLw7bsBXqyN6hjsO7MEu03SSJhfn:+B726SgFaIr/mmQBXD6hYx03RPfn
Malware Config
Signatures
Files
-
3beb329a529e3a80cd3193fcf3b4243ffae83ca9a1677ed2ff2d5fe5a52a1588.exe windows x86
8b481bee114bb7910616be1ebf88cbf2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStdHandle
GetStartupInfoA
Sleep
CreateFileA
GetPriorityClass
SetLastError
GetFileAttributesA
ReadConsoleA
HeapDestroy
FatalExit
OpenSemaphoreA
LoadLibraryA
DeleteFileW
CreateMutexW
GetFileSize
ReleaseMutex
HeapSize
MapViewOfFile
CreateHardLinkA
CreateSemaphoreA
VirtualProtect
CreateDirectoryW
SetLastError
GetProcessHeap
GetTickCount
dsprop
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
rtutils
LogEventA
LogErrorW
LogErrorA
LogEventW
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 760KB - Virtual size: 760KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE