Static task
static1
Behavioral task
behavioral1
Sample
3df207ef082b96d7d57432c1625efc8dac4664c2dde0de1f6c044a13a38e0b33.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
3df207ef082b96d7d57432c1625efc8dac4664c2dde0de1f6c044a13a38e0b33.exe
Resource
win10v2004-20220812-en
General
-
Target
3df207ef082b96d7d57432c1625efc8dac4664c2dde0de1f6c044a13a38e0b33
-
Size
210KB
-
MD5
6ed889470db31c794a080657110c1db0
-
SHA1
ea51aff233287d362e40e2640d7497c3c0804e22
-
SHA256
3df207ef082b96d7d57432c1625efc8dac4664c2dde0de1f6c044a13a38e0b33
-
SHA512
201b324f544944cc86ec08edf643941799e46e72a4e3bdabe432a91b68c690fa406ac7608cab13e467ff454c388c20a5038302e1d126e02612902e64e236847f
-
SSDEEP
3072:gFp0Fo5Lu66YvrkFXUmfUlFT88ZktAYY3q6Z3gahQlsye9:gF2F6vCUmEFlYY3q6FFR9
Malware Config
Signatures
Files
-
3df207ef082b96d7d57432c1625efc8dac4664c2dde0de1f6c044a13a38e0b33.exe windows x86
41ef5a39874c874f42c60d0052bc40eb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryExA
CloseHandle
DeleteAtom
FreeConsole
GetStdHandle
LockResource
RaiseException
WriteProfileStringA
VirtualProtect
HeapCreate
lstrcpyA
LocalFree
GlobalUnlock
GlobalAddAtomA
GlobalFree
GetTimeFormatA
SizeofResource
GetLastError
GetACP
GlobalAddAtomA
EnterCriticalSection
user32
DrawEdge
GetWindowTextLengthA
ValidateRect
GetClassInfoExA
BeginPaint
GetWindow
ShowWindow
ReleaseDC
AlignRects
GetFocus
GetWindowTextA
GetForegroundWindow
GetClassNameA
GetDC
IsIconic
CloseWindow
EndPaint
GetActiveWindow
GetParent
mprapi
MprAdminUserClose
MprAdminUserOpen
MprAdminUserRead
MprAdminUserGetInfo
MprAdminUserWrite
mapi32
MAPILogonEx
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ