Static task
static1
Behavioral task
behavioral1
Sample
3326299b8e9836e24c5373791de6a0176278d52995389da1f21018e56260f2cd.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
3326299b8e9836e24c5373791de6a0176278d52995389da1f21018e56260f2cd.exe
Resource
win10v2004-20220812-en
General
-
Target
3326299b8e9836e24c5373791de6a0176278d52995389da1f21018e56260f2cd
-
Size
121KB
-
MD5
4a5c2103dfc017b2f7586f0f63b7f8da
-
SHA1
11fdaf369880f998536decc9d08722a77e305088
-
SHA256
3326299b8e9836e24c5373791de6a0176278d52995389da1f21018e56260f2cd
-
SHA512
f8c57da6650ef66b9047575cf40135609f42cde5f4b73133765cd0a9786ea35805663f38e1f23eed1d6740bd69d8c425a27094a8a708bb1619736d87d2b2a2a0
-
SSDEEP
3072:mQQEJ2/xAmdr6mzpeS71HnpPfuo07Ms/m/F:n2/xp6pS71HndGo0bm/
Malware Config
Signatures
Files
-
3326299b8e9836e24c5373791de6a0176278d52995389da1f21018e56260f2cd.exe windows x86
32b193dae39310fd7a728d1c5a62cd94
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetExitCodeProcess
FindResourceW
lstrcmpA
GetPrivateProfileSectionA
VirtualAllocEx
InterlockedIncrement
GetLongPathNameA
GetDiskFreeSpaceW
GetPrivateProfileIntA
GetDiskFreeSpaceW
Sleep
Sleep
Sleep
WriteFileEx
LoadLibraryA
CreateDirectoryA
GetPrivateProfileIntA
WaitForSingleObject
ExitProcess
GetFileAttributesA
SetEnvironmentVariableA
lstrcpyW
InterlockedDecrement
apphelp
AllowPermLayer
ApphelpCheckExe
SdbCreateMsiTransformFile
ApphelpCheckIME
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rss Size: 116KB - Virtual size: 115KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ