Static task
static1
Behavioral task
behavioral1
Sample
3d6f1a7fe0687bba33bf9f53d9c9a81e8450f56cfb3eaa78356d7048a6735e40.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
3d6f1a7fe0687bba33bf9f53d9c9a81e8450f56cfb3eaa78356d7048a6735e40.exe
Resource
win10v2004-20220812-en
General
-
Target
3d6f1a7fe0687bba33bf9f53d9c9a81e8450f56cfb3eaa78356d7048a6735e40
-
Size
57KB
-
MD5
8d6c4aac016fbad29ffc0da59dd89e32
-
SHA1
77f746a48347ea9902a0eacffc738dca0c0e3319
-
SHA256
3d6f1a7fe0687bba33bf9f53d9c9a81e8450f56cfb3eaa78356d7048a6735e40
-
SHA512
26f0069172206115a2fe0514d1ef62e812f1fbfa0f2a33ce50eb0ab5cd84277bb7fcd83dec1e7a24819b0af45dbec37ec506ce1e2c38b475f37bbbb65d5f6fb0
-
SSDEEP
1536:my9/3EyhYzB2P2rOVqwxodlQrf8Wqaqb+2:my9fEya1LrYqdQrkhe2
Malware Config
Signatures
Files
-
3d6f1a7fe0687bba33bf9f53d9c9a81e8450f56cfb3eaa78356d7048a6735e40.exe windows x86
1f8f81f6ebfe387eb4a7fc4b5d7b6b38
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
lstrcpyA
Sleep
CreateProcessA
lstrlenA
GetComputerNameA
GetLocaleInfoW
GetModuleHandleA
FreeResource
FindResourceA
GetLastError
GetCurrentProcess
FreeLibrary
DeleteFileA
ExitProcess
GetTickCount
WaitForSingleObject
GetModuleFileNameA
CopyFileA
lstrcmpiA
RaiseException
InterlockedExchange
LocalAlloc
GetStartupInfoA
msvcrt
??2@YAPAXI@Z
fread
ftell
fseek
fclose
fopen
atoi
strncpy
strcspn
_except_handler3
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
strstr
rand
malloc
realloc
sprintf
Sections
.data Size: 31KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ