Static task
static1
Behavioral task
behavioral1
Sample
3ba44085751bb0cca7f3ac6f346ea3e6a09e0f4f68201626862dcc61d98ce113.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
3ba44085751bb0cca7f3ac6f346ea3e6a09e0f4f68201626862dcc61d98ce113.exe
Resource
win10v2004-20220812-en
General
-
Target
3ba44085751bb0cca7f3ac6f346ea3e6a09e0f4f68201626862dcc61d98ce113
-
Size
49KB
-
MD5
113f10c66db3f82fb362d9377a28e930
-
SHA1
8270b4194c920221c819f65555f6bc284b5b4dc1
-
SHA256
3ba44085751bb0cca7f3ac6f346ea3e6a09e0f4f68201626862dcc61d98ce113
-
SHA512
1c8da02de0cc0fc79f8df448068ffdd7375d5b5a4144f334e6ff685abce05a2289ba5ec15a729f691531cedceec2ffdbf49a9da436eb4410afd678a0b964c3d4
-
SSDEEP
1536:TCBs2dk1EdUyb38tpMYmka6a+5a+IiusyZxz:eBOgUZfB1jg+1uZ5
Malware Config
Signatures
Files
-
3ba44085751bb0cca7f3ac6f346ea3e6a09e0f4f68201626862dcc61d98ce113.exe windows x86
b892955ae494fe908bdf52e81e1dfa4c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect
user32
EndPaint
advapi32
RegCloseKey
shell32
ShellExecuteA
ws2_32
WSAStartup
iphlpapi
GetAdaptersAddresses
Sections
GIDHETW Size: - Virtual size: 156KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
GIDHETW Size: 48KB - Virtual size: 52KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE