Static task
static1
Behavioral task
behavioral1
Sample
3931ef638c970c8fc5999c532fb9d98cb3701c31d43bdba5b467c2ad333ab8ed.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
3931ef638c970c8fc5999c532fb9d98cb3701c31d43bdba5b467c2ad333ab8ed.exe
Resource
win10v2004-20221111-en
General
-
Target
3931ef638c970c8fc5999c532fb9d98cb3701c31d43bdba5b467c2ad333ab8ed
-
Size
78KB
-
MD5
adae947d0f32966171ae37877750ba63
-
SHA1
c78c63ec5e8569e84d9e983e09fb28f7bb0d4b11
-
SHA256
3931ef638c970c8fc5999c532fb9d98cb3701c31d43bdba5b467c2ad333ab8ed
-
SHA512
c0f062324549d9a901b1af55143b2db1a38570d79fda3bb3e7c0ce3a59e803d661a8434502aba23aa7a5eda9de37da675902072a1265612774b1aa156b1f008f
-
SSDEEP
1536:qGGsAwmqXxRGHPYKbaf0C9VOkx2+1kcpvwa5bhI:qvs3LxWx/C7/22xpvwsS
Malware Config
Signatures
Files
-
3931ef638c970c8fc5999c532fb9d98cb3701c31d43bdba5b467c2ad333ab8ed.exe windows x86
a407789e2bc96d7fb9bca44a42baec41
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetEnvironmentVariableA
CompareStringW
HeapSize
FlushFileBuffers
CreateFileW
GetStringTypeW
LCMapStringW
LoadLibraryW
IsProcessorFeaturePresent
HeapReAlloc
RtlUnwind
WriteConsoleW
MultiByteToWideChar
IsValidCodePage
CloseHandle
GetLocalTime
HeapCreate
GetLastError
GetTickCount
GetCurrentProcess
HeapAlloc
HeapFree
GetSystemTimeAsFileTime
GetCommandLineA
HeapSetInformation
GetStartupInfoW
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
DecodePointer
EncodePointer
WideCharToMultiByte
GetTimeZoneInformation
SetStdHandle
EnterCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
GetFileType
WriteFile
GetConsoleCP
GetConsoleMode
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
GetModuleHandleW
SetLastError
GetCurrentThreadId
InterlockedDecrement
GetProcAddress
Sleep
ExitProcess
GetStdHandle
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
DeleteCriticalSection
QueryPerformanceCounter
GetCurrentProcessId
SetFilePointer
GetCPInfo
GetACP
GetOEMCP
user32
DestroyWindow
GetMessageA
SetCapture
LoadIconA
GetClientRect
TranslateMessage
LoadAcceleratorsA
DispatchMessageA
CloseWindow
DialogBoxParamA
GetScrollPos
Sections
.text Size: 43KB - Virtual size: 43KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 26KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ