Static task
static1
Behavioral task
behavioral1
Sample
c3de40d4883be7577d313d17dced17a83e2b1854d3839374d811cf09029b7bce.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c3de40d4883be7577d313d17dced17a83e2b1854d3839374d811cf09029b7bce.exe
Resource
win10v2004-20220812-en
General
-
Target
c3de40d4883be7577d313d17dced17a83e2b1854d3839374d811cf09029b7bce
-
Size
53KB
-
MD5
a2429f40f3fc2f7e22b1edb007e424dd
-
SHA1
98687bb7a0bf4ddfdb43996c4f50e95492620778
-
SHA256
c3de40d4883be7577d313d17dced17a83e2b1854d3839374d811cf09029b7bce
-
SHA512
19278b35725291a20101e5025a207578a2f826e0b330ca02e8037243689ac59f85a05c00ffaa38edd3838ac9658a8c83c66d22dd62e1ed5c51e5b5c4133a7d1c
-
SSDEEP
768:Ria+6Z2NTBFcH7MwZGQhrbp930NScD05sUvPRnAGENSb9eqdlQCmtLdxxNx:Ei2pYH7murdkY5sEnENOdGtNx
Malware Config
Signatures
Files
-
c3de40d4883be7577d313d17dced17a83e2b1854d3839374d811cf09029b7bce.exe windows x86
827381aab171066fc95bbb30ea3d221e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
WriteConsoleA
GetStartupInfoA
GetEnvironmentVariableA
GetFileAttributesW
lstrlenA
SetLastError
GetModuleHandleA
EnumResourceTypesA
HeapDestroy
GetDriveTypeW
GetCommandLineA
GetTimeFormatW
DeleteFileA
GetCommandLineA
HeapCreate
GetConsoleTitleA
CreateEventW
CloseHandle
GlobalFlags
advapi32
InitializeSid
IsValidSid
IsValidSid
IsValidSecurityDescriptor
IsValidSid
IsValidSid
RegQueryValueW
IsValidAcl
RegCreateKeyExW
IsValidSid
CreateProcessAsUserW
RegDeleteValueA
RegEnumKeyA
cnvfat
ConvertFAT
ConvertFAT
ConvertFAT
ConvertFAT
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 10B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 47KB - Virtual size: 152KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE