Static task
static1
Behavioral task
behavioral1
Sample
0f3a41ce04d041284dfd02dd65c9709854b4b79cbc82c43f66d64227589980ed.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
0f3a41ce04d041284dfd02dd65c9709854b4b79cbc82c43f66d64227589980ed.exe
Resource
win10v2004-20221111-en
General
-
Target
0f3a41ce04d041284dfd02dd65c9709854b4b79cbc82c43f66d64227589980ed
-
Size
298KB
-
MD5
63ace4f28f105e406b07564a9058049d
-
SHA1
56aab05429fd588838e1b671a5be8007cfef1dc8
-
SHA256
0f3a41ce04d041284dfd02dd65c9709854b4b79cbc82c43f66d64227589980ed
-
SHA512
07191dfe1dd3641f7ad6a1475f51ed1c28db561a31a39c1e4d4fc7c46813e7939d34df453d1fd6cb30812edbefd6ea31ab57e5038a7e47bba0809a6bb6323ee9
-
SSDEEP
6144:EamVPodz8wi1x9Xx09QnAgm2sx6lO9of0ocV2j0MN+IOKyZ1b1C:+xgYt/9Xx0mA8sxaeV2j0Jd/b1
Malware Config
Signatures
Files
-
0f3a41ce04d041284dfd02dd65c9709854b4b79cbc82c43f66d64227589980ed.exe windows x86
e4c39e2fae101a36d63b834e9f0c76b0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcmpiA
GetPrivateProfileStringW
GetStdHandle
GetExitCodeProcess
IsValidCodePage
TlsFree
FileTimeToLocalFileTime
GetLogicalDrives
lstrcmpiA
SetLastError
EndUpdateResourceA
GetDriveTypeA
GetModuleHandleA
GetTickCount
HeapCreate
lstrcmpiA
lstrcmpiA
lstrcmpiA
CreateWaitableTimerW
GetBinaryTypeA
lstrcatW
Sleep
CreateNamedPipeA
ntmarta
EventGuidToName
AccFreeIndexArray
EventNameFree
AccConvertAccessToSD
Sections
.text Size: 4KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 290KB - Virtual size: 290KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.orpc Size: 1024B - Virtual size: 614B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ