Static task
static1
Behavioral task
behavioral1
Sample
3944939f20ca4d519213b824e43baac6ff2c734e8a292fd74dd8900d9e58940b.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
3944939f20ca4d519213b824e43baac6ff2c734e8a292fd74dd8900d9e58940b.exe
Resource
win10v2004-20220812-en
General
-
Target
3944939f20ca4d519213b824e43baac6ff2c734e8a292fd74dd8900d9e58940b
-
Size
488KB
-
MD5
1f8e210546cf1e21dcdeb705bee08fb1
-
SHA1
e21c3c7d48ea76bdd7c1003f69a5cfbe061cf3ae
-
SHA256
3944939f20ca4d519213b824e43baac6ff2c734e8a292fd74dd8900d9e58940b
-
SHA512
2fc41db8a949c22833a3884fbc27bc07b2553fcb4d979a1b22a9531400b0992b53d568405de55b14adba9ec83da5a48cc4c67899527b5ba6fc6eca5349e5ca4e
-
SSDEEP
6144:cx9aYNEVWxUGHIyic/7+qRW5JwHUsSxlJDyI4DwppwMO+rln9nv24gOivEbn/u:otOMej8KqRW5JwHUjJGGfnrlnY4wKG
Malware Config
Signatures
Files
-
3944939f20ca4d519213b824e43baac6ff2c734e8a292fd74dd8900d9e58940b.exe windows x86
cd859da8a47bba030b308f584055129f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
LoadLibraryW
GetProcAddress
GetModuleHandleW
PulseEvent
CreateEventW
GetModuleHandleA
TerminateThread
VirtualAlloc
LCMapStringA
GetStringTypeW
GetStringTypeA
CloseHandle
Sleep
MultiByteToWideChar
RaiseException
LoadLibraryA
GetOEMCP
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapReAlloc
HeapAlloc
TerminateProcess
GetCurrentProcess
HeapSize
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetCPInfo
GetACP
LCMapStringW
user32
DestroyWindow
GetDC
gdi32
SelectObject
winmm
auxSetVolume
winscard
SCardForgetCardTypeA
Sections
.text Size: 28KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 412KB - Virtual size: 411KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ