Static task
static1
Behavioral task
behavioral1
Sample
a3b6f42a0e57b6453817cfead38fe701f7df288a125d05b13af204d0ade42b37.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a3b6f42a0e57b6453817cfead38fe701f7df288a125d05b13af204d0ade42b37.exe
Resource
win10v2004-20220812-en
General
-
Target
a3b6f42a0e57b6453817cfead38fe701f7df288a125d05b13af204d0ade42b37
-
Size
12KB
-
MD5
492e73003c1335b8e4c4dfc82146aaad
-
SHA1
6a99961af13761141a3fd28945b26e160d4f3de4
-
SHA256
a3b6f42a0e57b6453817cfead38fe701f7df288a125d05b13af204d0ade42b37
-
SHA512
e77ffbd57106ec48914e666b9d6d6f23f3080eddc9b819e431db4981a7c6bdb26d2ee09bff890efc494f651f2dc0ee4b140d5d269793290751ada9cff654fa13
-
SSDEEP
192:lTIUvNJhd1mCDZkg270KvNZDoWFo8QX9A384H9UAjK1p9WAb5SX4UoynGbP:aUbTAXDToz4f9V+/9WANutC
Malware Config
Signatures
Files
-
a3b6f42a0e57b6453817cfead38fe701f7df288a125d05b13af204d0ade42b37.exe windows x86
ff55a162a879cae8d229f409dfe8018e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Process32Next
Process32First
CreateToolhelp32Snapshot
lstrcmpiA
GlobalAlloc
CreateFileA
GetModuleFileNameA
GetCommandLineA
GetLastError
CreateMutexA
Sleep
CreateDirectoryA
GetStartupInfoA
GetModuleHandleA
WriteFile
CloseHandle
DeleteFileA
LoadLibraryA
GetProcAddress
user32
MessageBoxA
advapi32
RegSetValueExA
RegCreateKeyA
RegOpenKeyA
RegCloseKey
msvcrt
_controlfp
_except_handler3
__set_app_type
strlen
strcpy
sprintf
memset
printf
strcat
memcpy
strstr
exit
fclose
fopen
strncpy
fread
fseek
__CxxFrameHandler
fscanf
remove
_exit
_XcptFilter
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
_strlwr
iphlpapi
GetAdaptersInfo
ws2_32
inet_addr
wininet
InternetCloseHandle
InternetReadFile
InternetOpenA
InternetOpenUrlA
Sections
.data Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ