Static task
static1
Behavioral task
behavioral1
Sample
3696e0852f48593363b1a09593a7c880dadd2ad5ecb7ef1447dbe424546b75ff.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
3696e0852f48593363b1a09593a7c880dadd2ad5ecb7ef1447dbe424546b75ff.exe
Resource
win10v2004-20220812-en
General
-
Target
3696e0852f48593363b1a09593a7c880dadd2ad5ecb7ef1447dbe424546b75ff
-
Size
212KB
-
MD5
043941da7061f84ff21f170acd5c1071
-
SHA1
d154e218c18bd324441559d2d5f865c25d090b2e
-
SHA256
3696e0852f48593363b1a09593a7c880dadd2ad5ecb7ef1447dbe424546b75ff
-
SHA512
92ce009aeb7916d0a40ec914d4f175f4c171f138e8f555bfab1c17a1ea85131e18bffe7d53706915e4c928ede41905c808ecb8e87671bd1125976c4d0262a133
-
SSDEEP
3072:k9YumNZ2yctvBmrqz+kxY7DyDwH/Pmv53WUPEi1qdCSG7LIscHMrsQ01nZxnip28:sdyctYrT7/PsW8EZd40seWs9Zxip
Malware Config
Signatures
Files
-
3696e0852f48593363b1a09593a7c880dadd2ad5ecb7ef1447dbe424546b75ff.exe windows x86
468af8f9d7234d37efb2230fd3cf0c75
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mfc42
ord535
ord1200
ord540
ord542
ord858
ord6569
ord5622
ord860
ord802
ord924
ord537
ord800
ord941
msvcrt
__set_app_type
_except_handler3
_controlfp
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
__getmainargs
_acmdln
exit
_XcptFilter
_exit
strrchr
__CxxFrameHandler
_initterm
kernel32
GetModuleHandleA
GetModuleFileNameA
GetStartupInfoA
GetSystemDefaultLangID
user32
MessageBoxA
advapi32
RegQueryValueExA
RegQueryInfoKeyA
RegEnumKeyExA
RegOpenKeyExA
RegCloseKey
shell32
ShellExecuteA
Sections
.text Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 368B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tc Size: 196KB - Virtual size: 196KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE