Static task
static1
Behavioral task
behavioral1
Sample
3ca987729c2a52d0c7f7198cd4fc21d2018db3b66ba7155b2e8fbcf1b5f91ea2.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
3ca987729c2a52d0c7f7198cd4fc21d2018db3b66ba7155b2e8fbcf1b5f91ea2.exe
Resource
win10v2004-20220812-en
General
-
Target
3ca987729c2a52d0c7f7198cd4fc21d2018db3b66ba7155b2e8fbcf1b5f91ea2
-
Size
25KB
-
MD5
c157da9c94a8b823e598e6136311d8d0
-
SHA1
b7f7f5e5cbd8cca1d4f4575592387e671b0c8a90
-
SHA256
3ca987729c2a52d0c7f7198cd4fc21d2018db3b66ba7155b2e8fbcf1b5f91ea2
-
SHA512
079e5e67fa88c670d5d4c5ae7f99de4086cdc86727cd40c7ff026d826a02dd5ac0113a6c3287a85c8883799d19feae05388ea09aa286d150baa6fb84de47a18b
-
SSDEEP
768:eHHKmM0qauedFQFtxTXKXAx6ZQgZOgRTi7D8O:eKmMyTcTXfxhgZzTzO
Malware Config
Signatures
Files
-
3ca987729c2a52d0c7f7198cd4fc21d2018db3b66ba7155b2e8fbcf1b5f91ea2.exe windows x86
691f1193f16065947032ace3a2329e55
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
msvcrt
fabs
comctl32
InitCommonControls
user32
IsChild
gdi32
BitBlt
ole32
CoInitialize
shell32
ShellExecuteExA
shlwapi
PathQuoteSpacesA
Sections
.MPRESS1 Size: 20KB - Virtual size: 52KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 880B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE