Static task
static1
Behavioral task
behavioral1
Sample
3b08b4f59ce43b84b2c0ca30e0f661653b11e48169243777bc9692a90e8fa178.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
3b08b4f59ce43b84b2c0ca30e0f661653b11e48169243777bc9692a90e8fa178.exe
Resource
win10v2004-20220812-en
General
-
Target
3b08b4f59ce43b84b2c0ca30e0f661653b11e48169243777bc9692a90e8fa178
-
Size
76KB
-
MD5
cd9fb853671bb038706e7bc78985f3a3
-
SHA1
04fb038b1ec1f44586c4b161e9e96c882f5615c6
-
SHA256
3b08b4f59ce43b84b2c0ca30e0f661653b11e48169243777bc9692a90e8fa178
-
SHA512
0ca381beef163832a639d2829dd7f5d244e6842a90f774d319c4fb56a92da306f1c781515284c17741c7f2731059b91e44f722bb51f072d611bdca7b24d75a7c
-
SSDEEP
1536:rQPUouO4j825GwN5Ll0LFXHjli9Duii4hpjVrs2ryrd1vUQuq6:EbhUGwNMxHjQ9DuilhHs2qo
Malware Config
Signatures
Files
-
3b08b4f59ce43b84b2c0ca30e0f661653b11e48169243777bc9692a90e8fa178.exe windows x86
e8e8e620346439a5092ca3b2e3ffd85d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetConsoleCP
BaseUpdateAppcompatCache
GetTempFileNameA
WriteConsoleOutputW
GetConsoleCursorMode
GlobalSize
GetConsoleProcessList
Toolhelp32ReadProcessMemory
PrivCopyFileExW
DeleteFileW
GetCPFileNameFromRegistry
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.brdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE