Static task
static1
Behavioral task
behavioral1
Sample
c3ab899c86b46c482f03f01cddbe1e37bfafed601fe17ab6d1d3fb14514517e9.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c3ab899c86b46c482f03f01cddbe1e37bfafed601fe17ab6d1d3fb14514517e9.exe
Resource
win10v2004-20220812-en
General
-
Target
c3ab899c86b46c482f03f01cddbe1e37bfafed601fe17ab6d1d3fb14514517e9
-
Size
297KB
-
MD5
b0784a8ac84c5b04c1e9e62c4a882c6b
-
SHA1
58d75e39f8163b2c704deeb5a10f4c8b01ba0353
-
SHA256
c3ab899c86b46c482f03f01cddbe1e37bfafed601fe17ab6d1d3fb14514517e9
-
SHA512
df30220c09751d618348e8ca816649489f6f334c63df795e60b534eadab8c349863f75aefb10527b4158984f1e58afdf58c058f29ca9dc833fb12fc3b7c4c330
-
SSDEEP
6144:NCdu6GMQxRkuQCO4rCoZY2W4hcpHBJIoGYcPxVHLJT9r:NCULR3Q74rCoZY2W4h0bIohUVHLJh
Malware Config
Signatures
Files
-
c3ab899c86b46c482f03f01cddbe1e37bfafed601fe17ab6d1d3fb14514517e9.exe windows x86
7915330e7f9a1d01d954a90ff8d10b03
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
ExitProcess
GetModuleHandleA
user32
GetKeyboardType
advapi32
RegQueryValueExA
oleaut32
SysFreeString
version
VerQueryValueA
gdi32
UnrealizeObject
comctl32
ImageList_SetIconSize
Sections
pec1 Size: 226KB - Virtual size: 496KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 69KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE