Static task
static1
Behavioral task
behavioral1
Sample
3e13ff1bb27f93a8ad8ec62a4836330ff9fa98d5a77a27b22476b201105d0a2e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
3e13ff1bb27f93a8ad8ec62a4836330ff9fa98d5a77a27b22476b201105d0a2e.exe
Resource
win10v2004-20220812-en
General
-
Target
3e13ff1bb27f93a8ad8ec62a4836330ff9fa98d5a77a27b22476b201105d0a2e
-
Size
71KB
-
MD5
0fcc26278c6a04de9508e52470390b33
-
SHA1
d98c7fa2f0aaabe3d9b9fd5e9b49fdc3cc0df492
-
SHA256
3e13ff1bb27f93a8ad8ec62a4836330ff9fa98d5a77a27b22476b201105d0a2e
-
SHA512
9f66ad33defdcbeeffccfb5e96bcbbe273d2db2f14c08818fbaf24e6016cdb79f3be97ab70e5d9acadfbde816f7e470a738963546952b74ba36e57632ea18bc8
-
SSDEEP
1536:f0VcYo2tnv/bLyTI7iVRQQRDRT8w89g6uOtr:fqto2xv/KTrRnDRTo9buq
Malware Config
Signatures
Files
-
3e13ff1bb27f93a8ad8ec62a4836330ff9fa98d5a77a27b22476b201105d0a2e.exe windows x86
b72fdd7c664dc815340dcdd23ee1bcd6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
RtlMoveMemory
GetDriveTypeA
WritePrivateProfileStructW
GetPrivateProfileStringW
IsSystemResumeAutomatic
lstrlen
LocalSize
DeleteFileA
PrivMoveFileIdentityW
VerifyVersionInfoA
GetExitCodeThread
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 47KB - Virtual size: 66KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE