Static task
static1
Behavioral task
behavioral1
Sample
c3b18065ad16f71a1904fb9bee3e9398ef82df18c5d635193143881f2b1e0463.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
c3b18065ad16f71a1904fb9bee3e9398ef82df18c5d635193143881f2b1e0463.exe
Resource
win10v2004-20220812-en
General
-
Target
c3b18065ad16f71a1904fb9bee3e9398ef82df18c5d635193143881f2b1e0463
-
Size
564KB
-
MD5
2a42b3eb2abe102c723bc9e31ae9e9b8
-
SHA1
ab9cd8216658b4a625c7c88ad06cb0d8953faf6d
-
SHA256
c3b18065ad16f71a1904fb9bee3e9398ef82df18c5d635193143881f2b1e0463
-
SHA512
a49265183c552b6f83a3cd052f7535f9d3c27688c2dc439eb1f63a1fdfff3b92cadc3d708af1e241cc37f7da6eeb543535a80a671c8d2548c07bbb4d57e4d7eb
-
SSDEEP
12288:2HbqO/51a8VgIwzM2jCkbzP1OPGzxBJl:pO/Pa8iXA2jCkbj1J
Malware Config
Signatures
Files
-
c3b18065ad16f71a1904fb9bee3e9398ef82df18c5d635193143881f2b1e0463.exe windows x86
66dc135db25b703f8772a929bb27f6e1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ResetEvent
CloseHandle
CreateFileA
Sleep
GetTickCount
VirtualAlloc
GetProcAddress
SetFirmwareEnvironmentVariableW
LoadLibraryA
CreateEventA
GetLastError
VirtualAllocEx
SetFilePointer
GetLocaleInfoA
RtlUnwind
LCMapStringW
LCMapStringA
HeapSize
HeapReAlloc
HeapAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
ExitProcess
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
MultiByteToWideChar
VirtualProtect
GetSystemInfo
VirtualQuery
GetACP
GetOEMCP
GetCPInfo
GetStringTypeA
GetStringTypeW
ReadFile
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
FlushFileBuffers
SetStdHandle
ole32
CoCreateInstance
CoUninitialize
CoInitialize
msacm32
acmFilterEnumA
Sections
.text Size: 24KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 436KB - Virtual size: 434KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 96KB - Virtual size: 527KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ