Static task
static1
Behavioral task
behavioral1
Sample
a3b8cc19c8ee6f1b6b17228366ce7fa186689048ccba4bdff14f445a74b0c51d.exe
Resource
win7-20221111-en
General
-
Target
a3b8cc19c8ee6f1b6b17228366ce7fa186689048ccba4bdff14f445a74b0c51d
-
Size
92KB
-
MD5
594994c8fc6eda82a44d89fb389102fb
-
SHA1
5c423155b28d00a4d9ca61d239857cd40c4cc931
-
SHA256
a3b8cc19c8ee6f1b6b17228366ce7fa186689048ccba4bdff14f445a74b0c51d
-
SHA512
39a7c29e2a626f6e7a3262e77cfdc85f2a04a36ce1500ce1854cbebf48a725fe0e020ad7c2be979e8c82dad605a34e0c105ca937433cbec7d3688f8a7bd64c3b
-
SSDEEP
1536:kDGe2DKV7GcAJ4cRpa/Tb66JNULlSZ5h6T714g8RAdg8huqQNWOTUr3ABi:Be2DCGcY4cRpa/T+3LlU5MmgjFEVWOg3
Malware Config
Signatures
Files
-
a3b8cc19c8ee6f1b6b17228366ce7fa186689048ccba4bdff14f445a74b0c51d.exe windows x86
4a3e5d2ab8779b78634c8c53c1d77932
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetWindowsDirectoryA
GetCurrentThread
GetCurrentThreadId
GetStdHandle
CreateMutexA
GetCurrentProcessId
LocalFree
GetSystemDirectoryA
SleepEx
VirtualAlloc
GetCurrentProcess
GetVersionExA
LocalAlloc
GetCurrentDirectoryA
ExitProcess
GetComputerNameA
advapi32
GetUserNameA
user32
GetForegroundWindow
GetSystemMetrics
GetActiveWindow
Sections
.text Size: 33KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 56KB - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ