Static task
static1
Behavioral task
behavioral1
Sample
a3e4365a77f0c8ca93208f3a8237e351698b0331a70a19f9ecd645ed980e32b8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a3e4365a77f0c8ca93208f3a8237e351698b0331a70a19f9ecd645ed980e32b8.exe
Resource
win10v2004-20220901-en
General
-
Target
a3e4365a77f0c8ca93208f3a8237e351698b0331a70a19f9ecd645ed980e32b8
-
Size
135KB
-
MD5
56c82fed90feb6e6cdd2f3a30ba68216
-
SHA1
4e13e5e84a0755081f05708efa8e077c50434d4b
-
SHA256
a3e4365a77f0c8ca93208f3a8237e351698b0331a70a19f9ecd645ed980e32b8
-
SHA512
fbeb6870f561e11e127db9ef934ddb2010c6f863f68a48fab588efa662723e005053bde0ef93bd3ff698c9fdc33977e070b728fae0ddb735ed729ec1fc584459
-
SSDEEP
3072:Q0raRWszRp9Vqe9NHoPzvTkxQi0QAeQ8J9avEfVK3:trSXtMe9NHo7TkxOPYavB3
Malware Config
Signatures
Files
-
a3e4365a77f0c8ca93208f3a8237e351698b0331a70a19f9ecd645ed980e32b8.exe windows x86
3502d36bb44f7c3edfee311a64ad9926
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FreeConsole
GetModuleFileNameA
FreeConsole
GetLastError
FreeConsole
GetFileSize
FreeConsole
GetCPInfo
FreeConsole
GetLastError
FreeConsole
lstrcatA
FreeConsole
lstrcmpA
FreeConsole
GetFileAttributesA
FreeConsole
HeapFree
FreeConsole
lstrcpyA
GetCommandLineW
WideCharToMultiByte
FreeLibrary
GetCommandLineA
HeapFree
GetModuleFileNameA
GetStringTypeW
GetFileType
GlobalAlloc
lstrcpynA
GetLogicalDrives
lstrcmpiA
GetLastError
GetLastError
GetLocalTime
GetFileAttributesA
HeapAlloc
Sleep
DeleteFileA
user32
CloseWindow
GetDlgItem
AppendMenuA
GetMenu
GetWindowTextA
LoadMenuA
CopyImage
DrawIcon
DrawTextA
GetCursor
BlockInput
InsertMenuA
GetFocus
CopyIcon
AppendMenuW
CreateIcon
GetWindowTextLengthA
IsMenu
DialogBoxParamA
DialogBoxParamW
GetMenu
GetWindowTextLengthA
LoadMenuA
LoadCursorA
IsMenu
DialogBoxParamA
CopyRect
CopyImage
DialogBoxParamW
CopyIcon
IsWindow
BlockInput
AppendMenuA
DrawIcon
GetDlgItem
InsertMenuA
CreateIcon
GetWindowTextA
Sections
.tadt Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 105KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edada Size: 1024B - Virtual size: 94KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idada Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ