Static task
static1
Behavioral task
behavioral1
Sample
3a1bcd31f4696b05c97723f1d5bedd651d5fbc5510e001f4ce673d450b296cd4.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
3a1bcd31f4696b05c97723f1d5bedd651d5fbc5510e001f4ce673d450b296cd4.exe
Resource
win10v2004-20221111-en
General
-
Target
3a1bcd31f4696b05c97723f1d5bedd651d5fbc5510e001f4ce673d450b296cd4
-
Size
211KB
-
MD5
15e36e2408594c0e560a908b0f67c6d8
-
SHA1
83dced3b8cc38c71732ec3e29a1493d7d01bf7c4
-
SHA256
3a1bcd31f4696b05c97723f1d5bedd651d5fbc5510e001f4ce673d450b296cd4
-
SHA512
0cb2e5433fe45aac84999faa050607c4c8113f3978d1e35f6b4f59e11be0ad22270d5228e799a54ee838d4429e61f4d3f35db0ae2f9a827c59b5d3e77e7a6df2
-
SSDEEP
6144:u0o2Iwq0oaEAKc1d4g3Mc0la7YV58ixAxnNo2N1n:2ttpAKcmc0la7yAxnNP1n
Malware Config
Signatures
Files
-
3a1bcd31f4696b05c97723f1d5bedd651d5fbc5510e001f4ce673d450b296cd4.exe windows x86
bca903bdf85c45b512c17b36cadb3620
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpyA
LockResource
GetLocaleInfoW
CreateFileA
WideCharToMultiByte
GetCurrentProcessId
HeapFree
GetProcessHeap
CloseHandle
LoadLibraryW
GetOEMCP
HeapAlloc
SystemTimeToFileTime
QueryPerformanceCounter
lstrlenA
GetTickCount
lstrcmpA
GetLocalTime
GetVolumeInformationA
GetSystemTimeAsFileTime
QueryDosDeviceA
GetCurrentProcess
MultiByteToWideChar
SetLastError
FindResourceA
SetUnhandledExceptionFilter
schannel
MakeSignature
QuerySecurityPackageInfoA
InitializeSecurityContextW
QueryContextAttributesW
QuerySecurityPackageInfoW
QueryContextAttributesA
scecli
SceCloseProfile
SceAppendSecurityProfileInfo
SceAddToNameStatusList
SceAnalyzeSystem
SceAddToObjectList
SceBrowseDatabaseTable
advapi32
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegQueryValueExW
Sections
.text Size: 144KB - Virtual size: 143KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 56KB - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rcrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ