Static task
static1
Behavioral task
behavioral1
Sample
c3487bb9dfac3f0643c8069dba19f3ea558ccdfbb01f8ae3e1ba2d26bd93fe36.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c3487bb9dfac3f0643c8069dba19f3ea558ccdfbb01f8ae3e1ba2d26bd93fe36.exe
Resource
win10v2004-20221111-en
General
-
Target
c3487bb9dfac3f0643c8069dba19f3ea558ccdfbb01f8ae3e1ba2d26bd93fe36
-
Size
108KB
-
MD5
3044b79cf78df385125d09ad692bce80
-
SHA1
6de6d551200f6189c5c8ec1e27583e598562fcbe
-
SHA256
c3487bb9dfac3f0643c8069dba19f3ea558ccdfbb01f8ae3e1ba2d26bd93fe36
-
SHA512
1a62734927f254802ef39c9ad0b49929c4901a0f3fe209cdafc7218079ccb594f053a78b52c430b36fd536a1df1341d102a7f0834e8d39ec14e57194b4c962b0
-
SSDEEP
1536:TNy9unEjbG9XlordYBUeS7JgYM+LVWP/De5ByzRiy4n+uFe8i7VfZHWVc55:BREGArdlD73M+Lk/1z34dbeV9sc55
Malware Config
Signatures
Files
-
c3487bb9dfac3f0643c8069dba19f3ea558ccdfbb01f8ae3e1ba2d26bd93fe36.exe windows x86
3e480b05cff2869591b34a31db93bcfe
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
oracore10
lmmfree
sslslini
lpmpgif
lpmpmai
lsfmai
lsfpv
lsfp
lfiwr
sslpminit
lfimknam
lfilini
lfiopn
lsfini
lpmloadpkg
lmmtophp
lpmmkpri
lpmexitprog
lmmmalloc
lcvb2bg
lfird
lficls
lmmcalloc
oranls10
lmsaicmt
lxhLangEnv
lxinitc
lxscop
lxsCpStr
lxsCmpStr
lmsagbf
orauts
GetModuleHandleA
LoadLibraryA
GetLastError
GetProcAddress
msvcr71
sprintf
_strlwr
_stricmp
_controlfp
_onexit
__dllonexit
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_amsg_exit
__p___initenv
_cexit
_XcptFilter
_exit
_c_exit
memset
exit
strncpy
_strcmpi
ctime
strstr
_iob
strrchr
printf
fflush
orageneric10
sbtclose
xsbtinfo
xsbtclose
xsbtwrite
xsbtread
xsbtopen
xsbtinit
sbtremove
slgcs
sbtinit
sbtopen
sbtread
sbtwrite
sbtinfo
xsbtremove
Sections
.text Size: 28KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE