Static task
static1
Behavioral task
behavioral1
Sample
c3e8dfeebdc5036fbaedbf21feec95520915cb3057cac46f92c29628f1833457.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c3e8dfeebdc5036fbaedbf21feec95520915cb3057cac46f92c29628f1833457.exe
Resource
win10v2004-20220812-en
General
-
Target
c3e8dfeebdc5036fbaedbf21feec95520915cb3057cac46f92c29628f1833457
-
Size
156KB
-
MD5
a344f84c39df5dbc97f566c4d79f2cfc
-
SHA1
3fb19091fb1973a208cc5d9b4b162c2860114406
-
SHA256
c3e8dfeebdc5036fbaedbf21feec95520915cb3057cac46f92c29628f1833457
-
SHA512
49e856225d37a721c89973db91073fa455593cd5877605f3924f52f5e98b7aa620df2a29bad43afd533e397a2325d676dbea1b4a1b77c40e37334599ff5d4c84
-
SSDEEP
3072:kl8TfpZ5zEaT6mZOVKnAHrOwFRgCdm4aC/feCKTPj7o:IEfpZ5z8cjAHawFRgCc4aof8/o
Malware Config
Signatures
Files
-
c3e8dfeebdc5036fbaedbf21feec95520915cb3057cac46f92c29628f1833457.exe windows x86
d6f353a76c973fde6bd8bfd952b0d3e5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindResourceA
GetModuleHandleA
GetFileType
GetVersion
InterlockedIncrement
GetStartupInfoA
CreateProcessA
Module32First
GetLocaleInfoA
GetConsoleMode
GetCurrentProcessId
GetNumberFormatA
lstrcatA
TlsGetValue
LeaveCriticalSection
lstrcmpA
CreateToolhelp32Snapshot
WideCharToMultiByte
IsBadStringPtrW
Sleep
VirtualFree
SetEndOfFile
GetCurrentDirectoryA
CreateThread
SetErrorMode
GetModuleFileNameA
FindClose
FreeLibrary
lstrcmpiA
SetUnhandledExceptionFilter
SizeofResource
QueryPerformanceFrequency
GetProcAddress
GetACP
UnhandledExceptionFilter
LockResource
RtlUnwind
user32
GetClassNameA
SetCursor
DefMDIChildProcA
GetPropA
DestroyWindow
DrawMenuBar
DrawTextA
GetDlgCtrlID
DrawIconEx
TranslateAcceleratorA
GetParent
LoadCursorA
CreateMenu
CheckDlgButton
SetUserObjectSecurity
SetForegroundWindow
EnumWindows
SendMessageTimeoutA
RegisterWindowMessageA
GetWindowPlacement
TranslateMessage
GetUserObjectSecurity
IsZoomed
GetMenu
CheckMenuItem
PtInRect
FillRect
MoveWindow
GetWindowTextA
FrameRect
MessageBoxA
msvcrt
__getmainargs
__p__fmode
memcpy
_initterm
_XcptFilter
_controlfp
_adjust_fdiv
__p__commode
_acmdln
_except_handler3
__setusermatherr
__set_app_type
_exit
exit
Sections
.text Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 256KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 125KB - Virtual size: 125KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ