Static task
static1
Behavioral task
behavioral1
Sample
3e8edee98f3357a88059b1439656bed4b6f49d37ba55d2a2e0bc5d5d4325e57d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
3e8edee98f3357a88059b1439656bed4b6f49d37ba55d2a2e0bc5d5d4325e57d.exe
Resource
win10v2004-20220901-en
General
-
Target
3e8edee98f3357a88059b1439656bed4b6f49d37ba55d2a2e0bc5d5d4325e57d
-
Size
759KB
-
MD5
043484066b505a87c17200e65f414039
-
SHA1
c9051f13221034af3472e12c1a1b42f997c4f792
-
SHA256
3e8edee98f3357a88059b1439656bed4b6f49d37ba55d2a2e0bc5d5d4325e57d
-
SHA512
82f83155f47cdb3b3cf4b0727bd2d4a1e50f7c22e1d0b15eb52c2544d1620fded559ffb453d18aadafda772c8f5bcb0993b21796d27907d789ea64076bc2feb0
-
SSDEEP
12288:287LKgdW/yB3rY1zGydpE2zv3F78pAl4vFY6IkACuZsl9GeH66OxOSx5t:xHpWqB3k1aydpL3pIAl4vmaAUl9pH2zl
Malware Config
Signatures
Files
-
3e8edee98f3357a88059b1439656bed4b6f49d37ba55d2a2e0bc5d5d4325e57d.exe windows x86
55988c86140867568595348d17f0b670
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteFileW
GetCommandLineA
HeapCreate
lstrlenA
GetEnvironmentVariableA
CreateEventA
CloseHandle
GetDriveTypeA
CloseHandle
CancelIo
GetCommandLineA
TlsGetValue
GetModuleHandleA
GetStartupInfoA
ResetEvent
VirtualQuery
HeapDestroy
GetTimeFormatA
GetConsoleTitleA
GetVolumePathNameA
advapi32
CreateProcessAsUserA
RegDeleteValueA
InitializeSid
IsValidSecurityDescriptor
ControlService
ClearEventLogW
IsValidSid
RegCreateKeyExW
RegEnumKeyA
IsTextUnicode
IsValidAcl
CreateServiceW
RegQueryValueW
rastapi
PortClearStatistics
PortClearStatistics
PortClearStatistics
PortClearStatistics
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 754KB - Virtual size: 753KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ