Static task
static1
Behavioral task
behavioral1
Sample
3fb8276bbd090ae8dd9f3102ac8bcccf80cc03243b3e7e1fe65e35f5a8aa17fe.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
3fb8276bbd090ae8dd9f3102ac8bcccf80cc03243b3e7e1fe65e35f5a8aa17fe.exe
Resource
win10v2004-20220812-en
General
-
Target
3fb8276bbd090ae8dd9f3102ac8bcccf80cc03243b3e7e1fe65e35f5a8aa17fe
-
Size
340KB
-
MD5
31eb96f239cb1d865d4252293e6bf490
-
SHA1
9618b351a496fd5ea6bb2436af74e7f845d609a3
-
SHA256
3fb8276bbd090ae8dd9f3102ac8bcccf80cc03243b3e7e1fe65e35f5a8aa17fe
-
SHA512
b2dab3d9431633ac435ba1baf3d13fa770e576da7ff91d2ae702ff52b6778a808ae4b05de0a698e000c935abae5dc31f24bc4f1483d6c66464a6e7fc5f3fda74
-
SSDEEP
3072:SP5mUo9yArphpTr9KCPwgenzMfXzZsYxdiptjnN+EhEf6k:SP54vpP9KjzasnLNV+fF
Malware Config
Signatures
Files
-
3fb8276bbd090ae8dd9f3102ac8bcccf80cc03243b3e7e1fe65e35f5a8aa17fe.exe windows x86
5492ac052381b89466d67d956a68714a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualLock
CloseHandle
GetFileSize
GetCurrentProcess
LockFileEx
VirtualProtect
DeleteAtom
VirtualAlloc
GetProcAddress
WaitForSingleObject
LoadLibraryA
GetTickCount
VirtualFree
Sleep
user32
GetClipboardData
ShowWindow
gdi32
SelectObject
CreateICW
advapi32
OpenThreadToken
SetEntriesInAclW
ole32
CoInitialize
oleaut32
VariantInit
msvfw32
DrawDibEnd
ws2_32
WSAGetLastError
WSAStartup
winmm
auxSetVolume
Sections
.text Size: 4KB - Virtual size: 786B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.xsg3 Size: 4KB - Virtual size: 411B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.eps Size: 4KB - Virtual size: 40B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 52KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 268KB - Virtual size: 268KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 592B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ