Static task
static1
Behavioral task
behavioral1
Sample
38be5f1da20384fe105cb80705ebcc9b396b4dfb9301362d238c0f4d93b384eb.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
38be5f1da20384fe105cb80705ebcc9b396b4dfb9301362d238c0f4d93b384eb.exe
Resource
win10v2004-20221111-en
General
-
Target
38be5f1da20384fe105cb80705ebcc9b396b4dfb9301362d238c0f4d93b384eb
-
Size
83KB
-
MD5
3cc40d5c0d01fc4fde3331d9695b1270
-
SHA1
14a7917535a6efb9838b7b1213f2bfef6f3967e2
-
SHA256
38be5f1da20384fe105cb80705ebcc9b396b4dfb9301362d238c0f4d93b384eb
-
SHA512
86c145899ac0d9d91bd60207cc886d6936347abc3c1c219ce25d0c3a7e2f19ff3f1bff736b8052df96c11049b16f725cd015b89a77d0853136d4a7a03ef29699
-
SSDEEP
768:5EgVAd0D3H+xi6KzgZUwcshOXBzqAyubQbWjejWsCo6csR6TsdMceFHdebG:ad83H9zqULshi5qJubQbWjj9ATsdQE
Malware Config
Signatures
Files
-
38be5f1da20384fe105cb80705ebcc9b396b4dfb9301362d238c0f4d93b384eb.exe windows x86
9f7d3a00b59731a137d0d1d2b77198c7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetACP
GetStdHandle
SetLastError
lstrlenA
GetFileAttributesW
ReleaseMutex
ResetEvent
CreateFileMappingA
TlsGetValue
CreateFileA
IsBadCodePtr
GetCommandLineW
GetEnvironmentVariableA
HeapCreate
SetEvent
GetStartupInfoA
HeapDestroy
TlsAlloc
GetModuleFileNameA
user32
PeekMessageA
DrawTextW
GetClassInfoA
CreateIcon
DispatchMessageA
IsZoomed
GetWindowLongA
DestroyMenu
GetSysColor
IsWindow
FindWindowA
DispatchMessageA
CallWindowProcW
stclient
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
timedate.cpl
CPlApplet
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 74KB - Virtual size: 102KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
bllygwa Size: - Virtual size: 80KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE