Static task
static1
Behavioral task
behavioral1
Sample
3183888ce1539658f19b132a51f631bfcece9db21a37148d6a69121c0184b27a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
3183888ce1539658f19b132a51f631bfcece9db21a37148d6a69121c0184b27a.exe
Resource
win10v2004-20220901-en
General
-
Target
3183888ce1539658f19b132a51f631bfcece9db21a37148d6a69121c0184b27a
-
Size
320KB
-
MD5
333dac620829f3ad2210d161d303b240
-
SHA1
4d2bdf8da679cbbfb7a22dda9946b67aeb7361ae
-
SHA256
3183888ce1539658f19b132a51f631bfcece9db21a37148d6a69121c0184b27a
-
SHA512
63abb1c24efa6b1a74c1c346fff9c37d4caf6461bf87eca9e7b2dc498367f519572b97354ea2578f106825e8651bcd9d5bbbdf50cbc92c056cffe0afac5154ba
-
SSDEEP
6144:PQPGS8wwQH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:PQTN2EB0NxDIBuOFe7/uT
Malware Config
Signatures
Files
-
3183888ce1539658f19b132a51f631bfcece9db21a37148d6a69121c0184b27a.exe windows x86
ad7a8d3a39b9f1ed1a169d37862508a9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpyn
GetStartupInfoA
GetCPInfo
GetVolumePathNameA
SetCurrentDirectoryA
IsProcessInJob
CreateHardLinkW
InterlockedPopEntrySList
OpenWaitableTimerA
GetBinaryTypeW
_llseek
WaitForMultipleObjects
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.brdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tc Size: 244KB - Virtual size: 244KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE