Static task
static1
Behavioral task
behavioral1
Sample
3f9343d4ba3a31d50ccdb1cad5f78744b711dcd622e2d846d972b5a7594e05a1.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
3f9343d4ba3a31d50ccdb1cad5f78744b711dcd622e2d846d972b5a7594e05a1.exe
Resource
win10v2004-20221111-en
General
-
Target
3f9343d4ba3a31d50ccdb1cad5f78744b711dcd622e2d846d972b5a7594e05a1
-
Size
80KB
-
MD5
ac89f24ac5d3e8199b21d0add9ecf301
-
SHA1
2341e027f1ac821006506156f30fd0226bfb3924
-
SHA256
3f9343d4ba3a31d50ccdb1cad5f78744b711dcd622e2d846d972b5a7594e05a1
-
SHA512
01f5d38cb0a39ed0ef7ab88620a489ed02602e5c43b279f1d41a3ec53be2f5c9c1e078244310626379505056d3de6a0c00173cf8c31896af26cf8658d4b1b9d7
-
SSDEEP
1536:XRvS2zumgU5uvk6DxL+/YYrCc3gJWxmuw3Z:czqkxLmYfc3Aamuw3Z
Malware Config
Signatures
Files
-
3f9343d4ba3a31d50ccdb1cad5f78744b711dcd622e2d846d972b5a7594e05a1.exe windows x86
23b3f51dc95f91c26f47158baa187527
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
CloseHandle
lstrcmpiA
GetTickCount
MultiByteToWideChar
lstrlenA
FreeLibrary
GetSystemDirectoryA
SetFileTime
SystemTimeToFileTime
CreateFileA
FileTimeToSystemTime
FileTimeToLocalFileTime
GetFileTime
WinExec
GetModuleFileNameA
GetEnvironmentVariableA
UnmapViewOfFile
DeleteFileA
GetModuleHandleA
MapViewOfFile
CreateFileMappingA
GetFileSize
LoadLibraryExA
GlobalAlloc
SetFileAttributesA
CopyFileA
MoveFileExA
FindNextFileA
FindFirstFileA
GetDriveTypeA
GetLogicalDriveStringsA
GlobalFree
GetVersionExA
GetTempPathA
Sleep
MoveFileA
GetWindowsDirectoryA
WaitForSingleObject
CreateThread
GetCurrentThreadId
GetLastError
DeviceIoControl
msvcrt
_strnicmp
sprintf
memset
??3@YAXPAX@Z
??2@YAPAXI@Z
memcmp
wcslen
memcpy
strcat
strcpy
strlen
strncpy
_wcsnicmp
swprintf
wcscpy
fclose
fseek
fwrite
fopen
strcmp
shlwapi
StrStrIA
Sections
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 56KB - Virtual size: 58KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 904B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ