Static task
static1
Behavioral task
behavioral1
Sample
3d30251a204398b8c222e2740037540b3f92a0158775581d1c9ec147e72bb32c.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
3d30251a204398b8c222e2740037540b3f92a0158775581d1c9ec147e72bb32c.exe
Resource
win10v2004-20220812-en
General
-
Target
3d30251a204398b8c222e2740037540b3f92a0158775581d1c9ec147e72bb32c
-
Size
94KB
-
MD5
91991ef881fab047516255d64617d502
-
SHA1
15ca186880a27c377aed6272c1640ff153165d18
-
SHA256
3d30251a204398b8c222e2740037540b3f92a0158775581d1c9ec147e72bb32c
-
SHA512
aba1890c39ec64bc7938c5f4948bb2bf31ea5302367cfc1904bc09ac8f342d403146ad377f2e1d2f721106356776d8d897daf09219e264aa3a27091b24a070fb
-
SSDEEP
1536:XS6tLTTB16cUYO8e9Vp0uVXMAP6XzR3XE7q0PnGmmKeoeQX7nkgGFZ:XSsLniHPjXVMljRE73nGmPeoeMLS
Malware Config
Signatures
Files
-
3d30251a204398b8c222e2740037540b3f92a0158775581d1c9ec147e72bb32c.exe windows x86
80e216532c63394e3061e0a5285df632
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
__p__fmode
_except_handler3
__p__commode
__getmainargs
_controlfp
_initterm
_XcptFilter
_adjust_fdiv
_exit
__p___initenv
__set_app_type
kernel32
LoadLibraryW
FileTimeToSystemTime
GetStartupInfoA
WritePrivateProfileStringA
GetVersionExA
GetTempPathA
LocalAlloc
GetFileType
GetModuleHandleW
GetDriveTypeA
GetSystemDirectoryA
GetTickCount
RemoveDirectoryA
RaiseException
lstrcmpiA
CompareStringW
VirtualProtect
GetExitCodeProcess
GetCurrentProcess
GlobalAlloc
GetFileAttributesW
GetTempFileNameA
GetProcessHeap
VirtualQuery
CopyFileA
SetThreadLocale
DeleteFileA
MultiByteToWideChar
GetStringTypeExA
GlobalUnlock
CreateFileMappingA
SetErrorMode
GetACP
FreeEnvironmentStringsW
GetThreadLocale
lstrcpyA
InterlockedExchange
GetDateFormatA
GetModuleHandleA
lstrcmpA
FreeEnvironmentStringsA
LCMapStringA
LoadResource
Sections
.text Size: 1024B - Virtual size: 780B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ