Static task
static1
Behavioral task
behavioral1
Sample
3fcf046f4f3b1df6ca62e6981677198ffab5d26de72ca8e7152ee8d7eca1b1b6.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
3fcf046f4f3b1df6ca62e6981677198ffab5d26de72ca8e7152ee8d7eca1b1b6.exe
Resource
win10v2004-20220901-en
General
-
Target
3fcf046f4f3b1df6ca62e6981677198ffab5d26de72ca8e7152ee8d7eca1b1b6
-
Size
41KB
-
MD5
04dc3bd7173bd9cabc2c92fb47de93a6
-
SHA1
009b51ccf0d70720f4665e47567673c2d7054191
-
SHA256
3fcf046f4f3b1df6ca62e6981677198ffab5d26de72ca8e7152ee8d7eca1b1b6
-
SHA512
93de0492dfb0d08a4262b265e138641dcf497a471a6241293a965b06ff863fc55af21866c92f20f84cf64043844cd4d4b3506c82f3ca0e3fb7b0ae906c47c5e6
-
SSDEEP
768:w/mJ4LAe0j1iSUwNv0fgToLapOiRTMalyu1Ky:wBATjnNuEpOiRQaK
Malware Config
Signatures
Files
-
3fcf046f4f3b1df6ca62e6981677198ffab5d26de72ca8e7152ee8d7eca1b1b6.exe windows x86
0a70028c1c8527eb70197d339e8dc4cf
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentThreadId
GetCurrentProcessId
GetTickCount
SetLastError
FreeLibrary
VirtualAlloc
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
GetProcAddress
GetModuleHandleA
LoadLibraryW
atl
AtlMarshalPtrInProc
ntdll
NtAddAtom
Sections
.textbss Size: - Virtual size: 240KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 512B - Virtual size: 428B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 404B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.idata Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE