Static task
static1
Behavioral task
behavioral1
Sample
a3415f940a7140245dabeb8cd3ce083e043a23be0368a97a1c2935bb5fb78c9b.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
a3415f940a7140245dabeb8cd3ce083e043a23be0368a97a1c2935bb5fb78c9b.exe
Resource
win10v2004-20221111-en
General
-
Target
a3415f940a7140245dabeb8cd3ce083e043a23be0368a97a1c2935bb5fb78c9b
-
Size
132KB
-
MD5
b7ebcd481342d5e5bcbacf39bcd59c97
-
SHA1
1d76b2326bd924c07ebc92967a8fd70db60a11c5
-
SHA256
a3415f940a7140245dabeb8cd3ce083e043a23be0368a97a1c2935bb5fb78c9b
-
SHA512
7f09275faba46ccfb6af4db1f1c199e5a6f630931ebc0880705871774b51cdef1b80d1d08a7db949da56f41bfc358d3235f0305a8aa91d60df4328aae3969937
-
SSDEEP
3072:EBOEmP0WZoHdEdXPMES4OTlY23z4flFfhQMd7HnDMzP:utWZoHY/VQl1QlBiM1Di
Malware Config
Signatures
Files
-
a3415f940a7140245dabeb8cd3ce083e043a23be0368a97a1c2935bb5fb78c9b.exe windows x86
0a38206b572e675465588e4d067e349b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteFileA
ExitProcess
FindFirstFileW
GetCurrentThread
GetEnvironmentStrings
GetFileTime
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
IsDebuggerPresent
LoadLibraryA
SystemTimeToFileTime
VirtualAlloc
VirtualFree
user32
CreateWindowExA
GetClassInfoA
GetDC
GetSysColor
IsWindowEnabled
IsWindowVisible
LoadIconA
SetFocus
SetForegroundWindow
SetWindowLongA
SetWindowTextA
gdi32
CreateBitmap
CreateBrushIndirect
CreatePalette
Escape
LineTo
RestoreDC
SetMapMode
UnrealizeObject
shell32
DoEnvironmentSubstW
DragFinish
ExtractIconA
SHBindToParent
SHGetPathFromIDList
SHGetSettings
ShellExecuteW
Sections
.text Size: 46KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 65KB - Virtual size: 65KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ