Static task
static1
Behavioral task
behavioral1
Sample
3cef51835442efd036974743de3b70494d55ea8b9af9ca7a21a2b6250559e187.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
3cef51835442efd036974743de3b70494d55ea8b9af9ca7a21a2b6250559e187.exe
Resource
win10v2004-20220812-en
General
-
Target
3cef51835442efd036974743de3b70494d55ea8b9af9ca7a21a2b6250559e187
-
Size
111KB
-
MD5
5ec8f36a90282871cc8e10d846766e33
-
SHA1
18019694f8fe7216afeaff39be66498c84eedb82
-
SHA256
3cef51835442efd036974743de3b70494d55ea8b9af9ca7a21a2b6250559e187
-
SHA512
654c143b87b19e64a05f73f8f68101ce36fb7105544d1b72cf20df0141041de82d4ace5c268ff1e99066dcd3ef33fa2e4c45ec7dce2ad4af8433172acac13b6a
-
SSDEEP
1536:GagpPxRNBBOAfmCq4ju9qxFzzukJ+0zgd6ur8KIgn13qw2T2dBp5:GzpDNjnfTueFJ+0s4ur9IgNQT2np
Malware Config
Signatures
Files
-
3cef51835442efd036974743de3b70494d55ea8b9af9ca7a21a2b6250559e187.exe windows x86
404642cde596dc1f96575af2c0eb3938
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
VirtualFree
GetCurrentProcessId
Sleep
ExitProcess
user32
GetMessagePos
winmm
timeSetEvent
comctl32
InitCommonControls
Sections
.text Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 66KB - Virtual size: 65KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 55KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE