Static task
static1
Behavioral task
behavioral1
Sample
3e1b38d530f02691618c6fd6a0e06394a54988547ed62afca850b469e79f2dcb.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
3e1b38d530f02691618c6fd6a0e06394a54988547ed62afca850b469e79f2dcb.exe
Resource
win10v2004-20220812-en
General
-
Target
3e1b38d530f02691618c6fd6a0e06394a54988547ed62afca850b469e79f2dcb
-
Size
339KB
-
MD5
c1f0fe1771c6b4bd799de54c44039136
-
SHA1
1d5a11cc3c0faaf69310c6c44ada2df4eb43d07e
-
SHA256
3e1b38d530f02691618c6fd6a0e06394a54988547ed62afca850b469e79f2dcb
-
SHA512
509124465dab4f40c2e3fb9ee01311e59071375c927f447abdfe592494910928bb3b1b4bd242478d2200f0e94a1712c04b41fcfb1211d14492e7cd1c7efb1093
-
SSDEEP
6144:8GEk5xrNMdRQN9MfNjkD0du1zL9MAz4Ns4pkQ5jMeZL:8tk2dRiGjjqLODG4pkQxXR
Malware Config
Signatures
Files
-
3e1b38d530f02691618c6fd6a0e06394a54988547ed62afca850b469e79f2dcb.exe windows x86
fba75cd170179541c3c04949a9ae7739
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
GetProcAddress
user32
LoadIconW
gdi32
CreateSolidBrush
advapi32
RegSetValueExW
shell32
SHBrowseForFolderW
ole32
CreateStreamOnHGlobal
oleaut32
VarUI4FromStr
version
VerQueryValueW
shlwapi
StrStrIW
winhttp
WinHttpOpenRequest
Sections
.MPRESS1 Size: 319KB - Virtual size: 612KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.MPRESS2 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE