Static task
static1
Behavioral task
behavioral1
Sample
a3b358b700d116e07b0a34fb8e33a466546e8177c6b238ea0acc9996907c515c.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
a3b358b700d116e07b0a34fb8e33a466546e8177c6b238ea0acc9996907c515c.exe
Resource
win10v2004-20221111-en
General
-
Target
a3b358b700d116e07b0a34fb8e33a466546e8177c6b238ea0acc9996907c515c
-
Size
297KB
-
MD5
74da1b95b6c8ffbf2270aad82d8b6dd6
-
SHA1
0acf7ed182446ebcded119de4ccb84ee6b75f2c5
-
SHA256
a3b358b700d116e07b0a34fb8e33a466546e8177c6b238ea0acc9996907c515c
-
SHA512
3f75c26c8b69e6d7a7893b0775e5b23cd8bc6adb387ea1fc86865bbc709a905b54dae6aaada6c64abbdf3a0f11c38f2553e340a48fc59ab6b678d2054018aa38
-
SSDEEP
6144:76WdKfcyDTnuJMjXy4hFaZ0S6jO1fEKD1b80f55/Jp:uWgkiuJML9a36jO1fDD1b80f55/f
Malware Config
Signatures
Files
-
a3b358b700d116e07b0a34fb8e33a466546e8177c6b238ea0acc9996907c515c.exe windows x86
166ece6b653678f5d1e22449bd93166a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryW
FindAtomA
SetEvent
GetFileAttributesA
CreateThread
GetSystemTime
GetModuleHandleA
GetCommandLineW
TlsGetValue
SuspendThread
GetDiskFreeSpaceW
CloseHandle
SetLastError
HeapCreate
CreateFileA
GetTickCount
LocalFree
ResetEvent
GetComputerNameA
GetExitCodeProcess
advapi32
RegEnumKeyExA
CloseEventLog
RegCreateKeyExA
GetUserNameW
RegQueryValueA
IsValidAcl
CreateServiceW
IsTokenRestricted
RegCloseKey
RegDeleteKeyA
RegEnumValueA
GetLengthSid
GetFileSecurityA
cryptui
LocalEnroll
CryptUIDlgCertMgr
WizardFree
CryptUIDlgSelectStoreA
CryptUIDlgSelectCA
user32
MessageBoxA
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 356KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 286KB - Virtual size: 286KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ