Static task
static1
Behavioral task
behavioral1
Sample
3f486a99761b38fc56708d20d743464a5ddb12d0af29e5eaa846f305d151bdca.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
3f486a99761b38fc56708d20d743464a5ddb12d0af29e5eaa846f305d151bdca.exe
Resource
win10v2004-20220812-en
General
-
Target
3f486a99761b38fc56708d20d743464a5ddb12d0af29e5eaa846f305d151bdca
-
Size
76KB
-
MD5
f70f2dd6880264329187f9a2f9b78ae3
-
SHA1
0a9e2ba73fa5318b599b9ff67406be7aef904c79
-
SHA256
3f486a99761b38fc56708d20d743464a5ddb12d0af29e5eaa846f305d151bdca
-
SHA512
c2d212d1b6398553bcb23a3e1c5a0413540c316504a7489722d825178e36ad0db821c4d746b46c052c0377b7d8ab51a231f6d8a1edbee085777472ac6a0c157e
-
SSDEEP
1536:ca37nnARCESnoziCiQFSDaPy4XlgojB3XqpjVrs2ryrd1vUQuq6:c8nARR+qRPqHs2qo
Malware Config
Signatures
Files
-
3f486a99761b38fc56708d20d743464a5ddb12d0af29e5eaa846f305d151bdca.exe windows x86
78d96e81d830ea60efc51614e3ba8fbe
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DosPathToSessionPathA
CopyFileExA
LCMapStringA
GetProfileStringA
GetConsoleNlsMode
MoveFileA
GetNativeSystemInfo
CancelWaitableTimer
IsProcessorFeaturePresent
GetFileAttributesExA
FreeLibraryAndExitThread
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.brdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE