Static task
static1
Behavioral task
behavioral1
Sample
a3df38a1df894fb5db74b61dedc395e4fa5862052f2452dfec5c4bf5e86a86b5.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a3df38a1df894fb5db74b61dedc395e4fa5862052f2452dfec5c4bf5e86a86b5.exe
Resource
win10v2004-20221111-en
General
-
Target
a3df38a1df894fb5db74b61dedc395e4fa5862052f2452dfec5c4bf5e86a86b5
-
Size
303KB
-
MD5
ba80f18419e103be6e6fb71cf7a01ead
-
SHA1
61591267781de2a82d64d999500ca67824a2db90
-
SHA256
a3df38a1df894fb5db74b61dedc395e4fa5862052f2452dfec5c4bf5e86a86b5
-
SHA512
453131f5309f6e8cd12fbfecbe6f04367120df19b4068deef4a5139b713d1b8952c201f260d5933e80e270b221be0e0fbe9ecdeb17dd6fdc5ad2d2b527775195
-
SSDEEP
6144:5O2yNnCDxy6rMeqhINRs85ZvDClO2zwUU+HOUPHb9:5OFNnOxx3rRh5dDwnzUGb9
Malware Config
Signatures
Files
-
a3df38a1df894fb5db74b61dedc395e4fa5862052f2452dfec5c4bf5e86a86b5.exe windows x86
42a3e8c92b7780fe98d64799f0433cfc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateDirectoryA
DeleteFileW
DeleteFileW
GetModuleHandleW
GetExitCodeProcess
HeapCreate
GetConsoleTitleA
GetModuleHandleA
GetDriveTypeA
SetCurrentDirectoryA
GetStringTypeW
SetFilePointer
IsValidCodePage
GetLastError
GetShortPathNameW
HeapAlloc
GetStdHandle
GetStringTypeW
HeapFree
SetEnvironmentVariableA
GetVersion
DeleteFileW
GetTickCount
mstscax
DllGetTscCtlVer
DllCanUnloadNow
DllRegisterServer
DllUnregisterServer
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dataz Size: 296KB - Virtual size: 296KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rs Size: 1024B - Virtual size: 544B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ