Static task
static1
Behavioral task
behavioral1
Sample
3a7dbfbbc04a8fe3da5675522b7a5a923a6c704a3053a9f4656181c6b18ebc4a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
3a7dbfbbc04a8fe3da5675522b7a5a923a6c704a3053a9f4656181c6b18ebc4a.exe
Resource
win10v2004-20220901-en
General
-
Target
3a7dbfbbc04a8fe3da5675522b7a5a923a6c704a3053a9f4656181c6b18ebc4a
-
Size
135KB
-
MD5
06f07f9203ebc93ce6f411a781511bf7
-
SHA1
333e077d23f2f2c335a32085e1113b6fff510603
-
SHA256
3a7dbfbbc04a8fe3da5675522b7a5a923a6c704a3053a9f4656181c6b18ebc4a
-
SHA512
be9f208c851536a810741355af4e10932c1a326d4ec648cea78a39f13be4454cee97cbe4577c1aca5727a48df39c53a09829133acb2ebb84b93881ebc20dc5b7
-
SSDEEP
3072:rQ0kMPr2ENjyAYNVMkGC5InhE+jIB+FB9H8wvrvHiDQipJZOPnnN5wJVW:slArDRDk2E+EIFB9H8WuDQInOE
Malware Config
Signatures
Files
-
3a7dbfbbc04a8fe3da5675522b7a5a923a6c704a3053a9f4656181c6b18ebc4a.exe windows x86
91d57720a119d8b9f099deec4276c60b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
RtlZeroMemory
GetPrivateProfileSectionA
CreateFileA
GetTempFileNameA
CreateWaitableTimerW
GlobalFlags
GlobalFree
OpenFileMappingA
GlobalGetAtomNameW
SetThreadPriorityBoost
GetFullPathNameA
FindResourceA
InterlockedDecrement
SetCalendarInfoA
FindResourceExW
WriteProfileSectionW
FatalExit
SetThreadAffinityMask
TransactNamedPipe
SetFilePointer
WaitNamedPipeA
GetTimeZoneInformation
FormatMessageA
FindResourceExA
GlobalAddAtomA
GetModuleHandleA
SuspendThread
TlsAlloc
OutputDebugStringW
GetStdHandle
GetVolumeNameForVolumeMountPointA
GetProcessAffinityMask
GetUserDefaultUILanguage
CloseHandle
GetThreadSelectorEntry
user32
DdeSetQualityOfService
CharPrevExA
EnumDesktopsA
SetMessageQueue
Sections
.text Size: 85KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 471B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 45KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE