Static task
static1
Behavioral task
behavioral1
Sample
3ea61d9c8873e01e4f98816048e325ceff10fc196c1feefffb7b4b653dda54ee.exe
Resource
win7-20220812-en
General
-
Target
3ea61d9c8873e01e4f98816048e325ceff10fc196c1feefffb7b4b653dda54ee
-
Size
177KB
-
MD5
456e40270e48f8caad0cc67ef473a4c8
-
SHA1
204dbab0184a367d352c421beb7387cdb40abf32
-
SHA256
3ea61d9c8873e01e4f98816048e325ceff10fc196c1feefffb7b4b653dda54ee
-
SHA512
c8507abc600fef41bdffc4bb7e86b87d1aac50db22a479718a049174e38453d2ce6a1e234fbf007f7c77d682c5ac33b1346916c78e1f39fb2e09bd77dd900131
-
SSDEEP
3072:firMdPkTsKtMRNzAWDmu2SXs6R8ewZp+pMRDxTXIIyvLU85Fsq:f+a8Y6MwWaZqvwZp+pMRxFyvLUYF
Malware Config
Signatures
Files
-
3ea61d9c8873e01e4f98816048e325ceff10fc196c1feefffb7b4b653dda54ee.exe windows x86
c2bf360823714705738a2a560c505c99
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdiplus
GdipGetImageWidth
GdipDisposeImage
ole32
CoGetMalloc
StringFromGUID2
CoTaskMemAlloc
CoUninitialize
CoInitialize
CoTaskMemFree
kernel32
WideCharToMultiByte
ExitProcess
HeapSize
GetCalendarInfoW
GetModuleFileNameA
SetHandleCount
lstrcpynA
GetVersionExA
GetLocaleInfoA
IsDBCSLeadByte
Sleep
DeleteFileA
GetStringTypeW
FindResourceA
SystemTimeToFileTime
GetCurrentProcess
HeapCreate
MultiByteToWideChar
HeapDestroy
EnumResourceNamesA
GetCurrentProcessId
GetCPInfo
DeleteFileW
InitializeCriticalSection
ExpandEnvironmentStringsA
GetNumberFormatA
WaitForSingleObject
CreateDirectoryA
GetStringTypeA
GetVersion
GetStartupInfoA
GetTempPathA
GetTickCount
lstrcpynW
CompareStringA
QueryPerformanceCounter
GetFullPathNameW
GetFullPathNameA
Sections
.text Size: 99KB - Virtual size: 98KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: 74KB - Virtual size: 74KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 244KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ