Static task
static1
Behavioral task
behavioral1
Sample
3008304d3cd259426e645155c824d6e6ee5f100e9a3c4e2221ba33d9dc77acf3.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
3008304d3cd259426e645155c824d6e6ee5f100e9a3c4e2221ba33d9dc77acf3.exe
Resource
win10v2004-20221111-en
General
-
Target
3008304d3cd259426e645155c824d6e6ee5f100e9a3c4e2221ba33d9dc77acf3
-
Size
390KB
-
MD5
29a86f232f0a3f9e15e0fc31318f85bd
-
SHA1
b8722f287a27340868c063926435eca186a0511f
-
SHA256
3008304d3cd259426e645155c824d6e6ee5f100e9a3c4e2221ba33d9dc77acf3
-
SHA512
9f96dd6f86898bf31313ba4a60607e463334f575e5302846e174a2297444f500e2e8eadbd3bacb211e186bf2d73397edba67c70c1ecbd91b5a2530e298b5496f
-
SSDEEP
6144:Y/AMLfvVclBJym4cyrC3AUMM4zgY2h18eqK7GeXGhF07itrg/1c:Y/AkvVcl6m2OwUMM4zOieqKd2Plt
Malware Config
Signatures
Files
-
3008304d3cd259426e645155c824d6e6ee5f100e9a3c4e2221ba33d9dc77acf3.exe windows x86
819e46179fc175c8942e9abcac0abb0e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__getmainargs
_except_handler3
_controlfp
_acmdln
exit
_XcptFilter
_exit
fclose
fseek
ftell
fread
fopen
malloc
??2@YAPAXI@Z
??3@YAXPAX@Z
__set_app_type
_stricmp
memcpy
memset
kernel32
GetModuleHandleA
VirtualProtect
LoadLibraryA
VirtualAlloc
GetProcAddress
IsBadReadPtr
WriteProcessMemory
IsDebuggerPresent
GetModuleFileNameA
VirtualProtectEx
GetCurrentProcess
ExitProcess
GetStartupInfoA
Sections
.text Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 353KB - Virtual size: 352KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.sdata Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pad Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ