Static task
static1
Behavioral task
behavioral1
Sample
3bfc706b9af95a5c6c9d2a9eebdd5bf084cf41185d5b966665cc8a1a46cc346e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
3bfc706b9af95a5c6c9d2a9eebdd5bf084cf41185d5b966665cc8a1a46cc346e.exe
Resource
win10v2004-20220812-en
General
-
Target
3bfc706b9af95a5c6c9d2a9eebdd5bf084cf41185d5b966665cc8a1a46cc346e
-
Size
800KB
-
MD5
06f8215171b73353838f6e9eece1e210
-
SHA1
9512712b3376169bc6e5a8c90948f497a12f787e
-
SHA256
3bfc706b9af95a5c6c9d2a9eebdd5bf084cf41185d5b966665cc8a1a46cc346e
-
SHA512
325184764fa8d0e3d2e360da21006f0268e79eb67c6ac714a7a0739e03b9312d2d14cebee3ef09a61d2adf289ca17b4bc83c3c7d04b44e0d97ec9068029f5136
-
SSDEEP
24576:Gn5n2ORQi+SlikozNZCU9I74fiW1LtLIzD:GF2ORJHlikozN0uLt8
Malware Config
Signatures
Files
-
3bfc706b9af95a5c6c9d2a9eebdd5bf084cf41185d5b966665cc8a1a46cc346e.exe windows x86
d983c561161472451d378d373aa2a32a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetDriveTypeW
MapViewOfFile
HeapSize
GetModuleHandleA
GetTickCount
FindResourceA
LocalLock
TlsGetValue
GetExitCodeThread
FindClose
VirtualProtect
CreateDirectoryW
GetStringTypeA
SetLastError
IsBadWritePtr
RemoveDirectoryW
GetFileAttributesA
GetLocaleInfoA
GetCurrentProcess
GetFileAttributesA
IsValidCodePage
user32
GetWindowTextW
wsprintfW
GetWindowLongW
SetFocus
LoadCursorA
IsWindow
GetCapture
PostMessageW
SetCursor
IsDialogMessageA
DispatchMessageA
PeekMessageW
LoadImageW
msaatext
DllCanUnloadNow
DllGetClassObject
DllUnregisterServer
DllUnregisterServer
rasapi32
DwRasUninitialize
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 699KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 789KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.import Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE