Static task
static1
Behavioral task
behavioral1
Sample
3eff891acfa7482af48cc5880f5ba54fcff443a5ab354bdb8faf4aa41a84a1ae.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
3eff891acfa7482af48cc5880f5ba54fcff443a5ab354bdb8faf4aa41a84a1ae.exe
Resource
win10v2004-20220812-en
General
-
Target
3eff891acfa7482af48cc5880f5ba54fcff443a5ab354bdb8faf4aa41a84a1ae
-
Size
184KB
-
MD5
86a4e9a7cd707a55d9fd469847ada62b
-
SHA1
944d6cda1eff0e40a96bc0fc29f2ce82d3225840
-
SHA256
3eff891acfa7482af48cc5880f5ba54fcff443a5ab354bdb8faf4aa41a84a1ae
-
SHA512
ded61b352ddd3b7087f77d9b467a69bde738f1f4f229c2aa72df8888d3ec9ad89ad7af8bb5be224cdbbc98d509a08ff0b1b542fa451685759a74ba3df12a54b1
-
SSDEEP
3072:Mwtci+K4oQSpW4oLhQ8noHKUi7/HtLhYxDPJLx1tpWJJOb1VLXh:9tci+loQfHFQ8S8NlYxRFgubjN
Malware Config
Signatures
Files
-
3eff891acfa7482af48cc5880f5ba54fcff443a5ab354bdb8faf4aa41a84a1ae.exe windows x86
1da5a16bc32f1df7ba9addf144db7520
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStartupInfoA
LocalAlloc
VirtualQueryEx
CreateProcessA
GetModuleHandleA
GetCurrentThreadId
GetSystemTimeAsFileTime
SetUnhandledExceptionFilter
GetEnvironmentVariableA
GetACP
ExitProcess
InterlockedExchange
Sleep
EnumResourceNamesW
WideCharToMultiByte
RaiseException
UnhandledExceptionFilter
GetCurrentProcess
lstrlenW
IsDebuggerPresent
GetTickCount
GetCPInfoExW
InterlockedCompareExchange
MultiByteToWideChar
GetCurrentProcessId
GetLocaleInfoA
QueryPerformanceCounter
lstrlenA
GetThreadLocale
advapi32
RegCreateKeyExA
RegCloseKey
RegDeleteKeyA
RegOpenKeyExA
RegEnumKeyExA
RegQueryValueExA
RegOpenKeyA
RegSetValueExA
ole32
StringFromIID
ProgIDFromCLSID
CoTaskMemFree
StringFromCLSID
oleacc
LresultFromObject
CreateStdAccessibleObject
shell32
SHGetMalloc
SHGetPathFromIDListA
SHGetSpecialFolderLocation
Sections
.text Size: 111KB - Virtual size: 110KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.tls Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 69KB - Virtual size: 69KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 260KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ