Static task
static1
Behavioral task
behavioral1
Sample
3bbfc0a5639108d6b773f2cfbd9e1117dd35d7241c340aad1aaeded001683d8c.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
3bbfc0a5639108d6b773f2cfbd9e1117dd35d7241c340aad1aaeded001683d8c.exe
Resource
win10v2004-20220812-en
General
-
Target
3bbfc0a5639108d6b773f2cfbd9e1117dd35d7241c340aad1aaeded001683d8c
-
Size
119KB
-
MD5
31b7801bd32584079426518b612982fc
-
SHA1
632cc0b676735207a1a54104c487534de128c5ed
-
SHA256
3bbfc0a5639108d6b773f2cfbd9e1117dd35d7241c340aad1aaeded001683d8c
-
SHA512
83c3b25f1ba26594a9cfa087b4dde4d985d021d7cdf0020979de11cab8e18b512248b2ec46a801e454c10396b26b2cf2a305e936f1852d9d190d229f1a48a915
-
SSDEEP
1536:InWWqHB82dJ5dAxNr4vwQcKIQhmVfBOohY90ww/BldpjVrs2ryrd1vUQuqSSqK5S:IWFHB8QWxpww15VUWY90R/fdHs2qxnC
Malware Config
Signatures
Files
-
3bbfc0a5639108d6b773f2cfbd9e1117dd35d7241c340aad1aaeded001683d8c.exe windows x86
c32d9523647142c0d64354d154de0c49
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetComputerNameExW
GetCurrentDirectoryW
GetComputerNameExA
GetProcessWorkingSetSize
PeekNamedPipe
FoldStringA
AllocConsole
FindActCtxSectionGuid
LZClose
TerminateProcess
GetVolumeInformationW
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.brdata Size: 63KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE