Static task
static1
Behavioral task
behavioral1
Sample
3a25ec2f29c360fa26d464efed9901682e3c4143dc2cf5a9fe3f017fc0687da6.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
3a25ec2f29c360fa26d464efed9901682e3c4143dc2cf5a9fe3f017fc0687da6.exe
Resource
win10v2004-20220901-en
General
-
Target
3a25ec2f29c360fa26d464efed9901682e3c4143dc2cf5a9fe3f017fc0687da6
-
Size
15KB
-
MD5
3438ec2244af66021ad9de1ad75eaa20
-
SHA1
f4b8479d66b0a85e5e05b8a6faac1db0f4717230
-
SHA256
3a25ec2f29c360fa26d464efed9901682e3c4143dc2cf5a9fe3f017fc0687da6
-
SHA512
62316b0b7cab4360097576d416b2393ccb90f2e2562fe25645dcf254c26b93b9f9121b8703b5354f2d587568b7b4698f9cd36fe7f4ec06dc70d72fa494ccc95a
-
SSDEEP
384:wwjViPDvq/LxBn/PiKC6oohIdZ2rl0w3Q:HjViPDy/lpPnieZ0w
Malware Config
Signatures
Files
-
3a25ec2f29c360fa26d464efed9901682e3c4143dc2cf5a9fe3f017fc0687da6.exe windows x86
9822448d962053f5a520ae1bc24113bc
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileA
TerminateProcess
CreateProcessA
LockFile
GetModuleHandleA
CreateFileMappingA
ReadFile
GetDriveTypeA
CopyFileA
OpenThread
GetCurrentProcess
MapViewOfFile
UnmapViewOfFile
CloseHandle
ExitProcess
GetCurrentDirectoryA
FindFirstFileA
FindNextFileA
FindClose
GetFileAttributesA
GetVersionExA
DeviceIoControl
LoadLibraryA
GetProcAddress
GetTickCount
DeleteFileA
WriteFile
Sleep
user32
MessageBoxA
ValidateRect
GetWindowTextA
DrawIcon
InvalidateRect
BeginPaint
GetSysColor
SetWindowTextA
advapi32
OpenServiceA
QueryServiceStatusEx
StartServiceA
CloseServiceHandle
CreateServiceA
OpenSCManagerA
CheckTokenMembership
AllocateAndInitializeSid
RegQueryMultipleValuesA
RegGetKeySecurity
RegQueryInfoKeyA
GetTokenInformation
OpenProcessToken
DeleteService
ControlService
FreeSid
Sections
.text Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE