Static task
static1
Behavioral task
behavioral1
Sample
3aaa9eb8509bc4547a75dd820a34ef3daccd68f0d9c009e7dc0c50d48b5a4204.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
3aaa9eb8509bc4547a75dd820a34ef3daccd68f0d9c009e7dc0c50d48b5a4204.exe
Resource
win10v2004-20220812-en
General
-
Target
3aaa9eb8509bc4547a75dd820a34ef3daccd68f0d9c009e7dc0c50d48b5a4204
-
Size
63KB
-
MD5
0eee47316b672b244db72fea0da5c7c9
-
SHA1
52c6a6b5ff97bb0abbf33f235924133875c0008c
-
SHA256
3aaa9eb8509bc4547a75dd820a34ef3daccd68f0d9c009e7dc0c50d48b5a4204
-
SHA512
f78c643fedd18cb4727b753b2ec640981a544a2ef9aeaeb567c2ea795cf89ce98f372fb12f4368606c342b5a059b290e5bda4b601c8c199c96dd3c31e4c7d962
-
SSDEEP
1536:bkDZU5vLO/R7s8ITnfO7Ua8T9+ZMtDcM7GcWeyMQHc:bvo4Cmx+ZgcM77QMH
Malware Config
Signatures
Files
-
3aaa9eb8509bc4547a75dd820a34ef3daccd68f0d9c009e7dc0c50d48b5a4204.exe windows x86
69bfb70675aec63a03b9904edb9487a0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalUnlock
FindFirstChangeNotificationW
WriteFile
FindFirstChangeNotificationW
InterlockedDecrement
CompareStringA
GetCompressedFileSizeA
IsBadStringPtrA
GetProfileIntW
LocalFree
CommConfigDialogA
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 49KB - Virtual size: 70KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE