Static task
static1
Behavioral task
behavioral1
Sample
b3f911048e2b5be0ecec98172ffd50b7d156aaa6c261da3398bfe559aa9c4e69.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b3f911048e2b5be0ecec98172ffd50b7d156aaa6c261da3398bfe559aa9c4e69.exe
Resource
win10v2004-20220812-en
General
-
Target
b3f911048e2b5be0ecec98172ffd50b7d156aaa6c261da3398bfe559aa9c4e69
-
Size
106KB
-
MD5
0a5f000fd12f5dd369f7c7efff50e27c
-
SHA1
e7de3d9b6a2d9f46619d7af4bb9a662fc1c3e768
-
SHA256
b3f911048e2b5be0ecec98172ffd50b7d156aaa6c261da3398bfe559aa9c4e69
-
SHA512
136f37eee20d55cba9873d514983053b081412ba2664caaa60e4f885b47708478e5922c811956427c3deff09405edc8b1778e998fa29294aa88c110b7ab485be
-
SSDEEP
1536:1tLliSATVECqnqDfeDfeDfIEU0TtILumenwslPWn7CAD99fTIdLGw2K2:1rizWsD2D2DDUqtEumv799RIaK2
Malware Config
Signatures
Files
-
b3f911048e2b5be0ecec98172ffd50b7d156aaa6c261da3398bfe559aa9c4e69.exe windows x86
0f13115edfce4d477b724312a6947c7b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
SetFileTime
OutputDebugStringA
DeleteFileW
GetUserDefaultLCID
DeleteFileA
IsBadWritePtr
GetTempPathA
GetVersionExW
SizeofResource
VirtualProtect
WideCharToMultiByte
GetFileType
GetCurrentProcess
GetModuleHandleW
LoadResource
GetTimeZoneInformation
InterlockedIncrement
GetCurrentThread
lstrcpynA
RtlMoveMemory
GetThreadLocale
GetTempPathW
IsBadReadPtr
GetProcAddress
WriteConsoleA
GetCPInfo
InterlockedCompareExchange
Sleep
msvcrt
_initterm
__p__commode
_exit
__set_app_type
_XcptFilter
__getmainargs
_controlfp
__p__fmode
__p___initenv
_except_handler3
tan
_adjust_fdiv
Sections
.text Size: 1024B - Virtual size: 578B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Nyhyt Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 100B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ