Static task
static1
Behavioral task
behavioral1
Sample
3d7d355ac09e23458a5db496a64dc74d550941d69c2f18a118b84c3f54c34552.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
3d7d355ac09e23458a5db496a64dc74d550941d69c2f18a118b84c3f54c34552.exe
Resource
win10v2004-20221111-en
General
-
Target
3d7d355ac09e23458a5db496a64dc74d550941d69c2f18a118b84c3f54c34552
-
Size
56KB
-
MD5
88ff349f008de9f29a84316969412cd8
-
SHA1
d3a5946c77f6c4cd20a9f9f795529caf0a9fc296
-
SHA256
3d7d355ac09e23458a5db496a64dc74d550941d69c2f18a118b84c3f54c34552
-
SHA512
cc5d8feb95c0dccf0901030cfce40cc69fb6e70dcdda4bc2d4a9a865bec6d3bdf7c9cf12b8d4b0690dc071db44d9b3f81f0bcee7fccef2ec71f357ffa79d35cd
-
SSDEEP
768:NB6BD/CXR+BBCaojPmgNEMQksmJdUNVEK006ofUKdlhSSMdLDNNHWj:L6BD6+5orm+EoUEyUiMd72j
Malware Config
Signatures
Files
-
3d7d355ac09e23458a5db496a64dc74d550941d69c2f18a118b84c3f54c34552.exe windows x86
e63c484c783557dc2a441fce20e4b8ca
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateDirectoryA
GetLogicalDriveStringsA
FindFirstFileW
WaitForSingleObject
SearchPathA
GetCurrentDirectoryW
CreateEventA
SetEnvironmentVariableA
OpenMutexW
GetLocaleInfoW
GetFileSize
CreateSemaphoreW
GetShortPathNameA
FileTimeToLocalFileTime
GetStartupInfoA
InterlockedIncrement
DeviceIoControl
GetTickCount
GetProcAddress
DeleteFileA
WriteConsoleW
GetModuleHandleA
clbcatq
SetupOpen
CoRegCleanup
SetSetupOpen
SetSetupSave
user32
LoadImageA
IsCharLowerW
GetMessageA
DefDlgProcA
PeekMessageW
MessageBoxW
GetClassInfoA
DrawIcon
GetKeyNameTextA
DialogBoxParamW
FindWindowA
PostMessageW
DispatchMessageW
LoadStringA
esent
JetCloseDatabase
JetBeginTransaction
Sections
.text Size: 20KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ