Static task
static1
Behavioral task
behavioral1
Sample
3a41c4467eb05fa493c1a348310f3983f091f5514edc5fe7f2a625e4363a40bc.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
3a41c4467eb05fa493c1a348310f3983f091f5514edc5fe7f2a625e4363a40bc.exe
Resource
win10v2004-20220812-en
General
-
Target
3a41c4467eb05fa493c1a348310f3983f091f5514edc5fe7f2a625e4363a40bc
-
Size
139KB
-
MD5
1a6f580c6d097b0c5dd11beda4bb6447
-
SHA1
39b7edae33318ca5960dea15c6cd53337789da29
-
SHA256
3a41c4467eb05fa493c1a348310f3983f091f5514edc5fe7f2a625e4363a40bc
-
SHA512
40e8329e34dd0d893bf45c732f67f84accc931d4f7dfdfc2df8eac4f3bfd10cb56171085be5d5abf98c6c58aefd3551d10e76af8ed44ef15f8433e1a2c79f19f
-
SSDEEP
3072:Il8X0rG3q/1/KNUv9DPwHSbi0i4VOXOAKfKwsaFjpOV:IOX0y3YIivqHSbFEOpgkk
Malware Config
Signatures
Files
-
3a41c4467eb05fa493c1a348310f3983f091f5514edc5fe7f2a625e4363a40bc.exe windows x86
911d16ed1bac6ef80996ee5cf951dc6e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_controlfp
??2@YAPAXI@Z
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
??3@YAXPAX@Z
user32
CreateDialogParamA
LoadMenuA
kernel32
VirtualAllocEx
WriteProcessMemory
GetThreadContext
SetThreadContext
GetStartupInfoA
GetCommandLineA
CreateProcessA
FindResourceA
GetModuleHandleA
GetProcAddress
LockResource
GetLastError
CreateThread
CloseHandle
WaitForSingleObject
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 130KB - Virtual size: 130KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 504B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ