Static task
static1
Behavioral task
behavioral1
Sample
e3900e6913e8142fb6043fad04aeb2b3893a1c03616b1fa4622dafce88033dfb.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e3900e6913e8142fb6043fad04aeb2b3893a1c03616b1fa4622dafce88033dfb.exe
Resource
win10v2004-20221111-en
General
-
Target
e3900e6913e8142fb6043fad04aeb2b3893a1c03616b1fa4622dafce88033dfb
-
Size
164KB
-
MD5
b0dcc60406b05bb79be9ed234dcab7ed
-
SHA1
6f74e17f33a15e0b3e53205678be51f18559a333
-
SHA256
e3900e6913e8142fb6043fad04aeb2b3893a1c03616b1fa4622dafce88033dfb
-
SHA512
d007c3ca7747022c6f3ce488c52dbdcd746060fb954a07d3de82b8dc0c4175bfca8d1b9c22d7b2594e7b677dd6a82dadc242aadc2ada88b2968ed36b9eab3727
-
SSDEEP
3072:LksjbZMW4I9eeZwDyC3y/9S1ynvc5iISZWzCpWJLvq4qEH1Hatqh1Nh5N:1beW4omGUEUEISEzxNqVtc
Malware Config
Signatures
Files
-
e3900e6913e8142fb6043fad04aeb2b3893a1c03616b1fa4622dafce88033dfb.exe windows x86
f3d99fbeda9a10f9149a8d5c0834bac6
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WriteFile
AddLocalAlternateComputerNameA
lstrlenA
IsDBCSLeadByte
FindFirstFileA
WideCharToMultiByte
GetCurrentThreadId
GetCurrentProcessId
FindNextFileA
ReadFile
EnumResourceTypesW
EnumResourceLanguagesW
CreateMailslotA
GetModuleHandleA
SetFilePointer
GlobalHandle
QueryPerformanceCounter
FindClose
newdev
UpdateDriverForPlugAndPlayDevicesA
oleacc
AccessibleChildren
CreateStdAccessibleProxyW
Sections
.text Size: 76KB - Virtual size: 75KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 404KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 85KB - Virtual size: 85KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ