Static task
static1
Behavioral task
behavioral1
Sample
b3de3ec7714d160fd674fa53fd94adbd6ae4f49d5fb0f2c2d57fbc336f47735d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b3de3ec7714d160fd674fa53fd94adbd6ae4f49d5fb0f2c2d57fbc336f47735d.exe
Resource
win10v2004-20220812-en
General
-
Target
b3de3ec7714d160fd674fa53fd94adbd6ae4f49d5fb0f2c2d57fbc336f47735d
-
Size
76KB
-
MD5
30b4aaa859650b38835d79be77872f99
-
SHA1
4c58a88354added64dc67e7b68d5cd591bdca5fc
-
SHA256
b3de3ec7714d160fd674fa53fd94adbd6ae4f49d5fb0f2c2d57fbc336f47735d
-
SHA512
391abfbf3753af4886b4763011ffce206633c4d5cf9fcfbc59ab1dff5c61e063d7e1d0f7a38bd03d03159b7ab48f9030eab7dbdb725aa8d1d78f60cd20d88654
-
SSDEEP
1536:mqwwwgCaCBS/et6tJoSag3I2QZ1F9cUOoScdeAapjVrs2ryrd1vUQuq6:mqwwwg8twtJoSCZX9cULUtHs2qo
Malware Config
Signatures
Files
-
b3de3ec7714d160fd674fa53fd94adbd6ae4f49d5fb0f2c2d57fbc336f47735d.exe windows x86
1f197aca7816e78be8b0dfe150d8f83e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetEnvironmentStringsA
DosPathToSessionPathA
GlobalLock
FlushInstructionCache
MoveFileA
GetProcessAffinityMask
lstrcpyn
EncodePointer
CreateNamedPipeW
GetDllDirectoryW
GetCommMask
DeleteFiber
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.brdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE