Static task
static1
Behavioral task
behavioral1
Sample
a3bd5141e1b82f5c00a40d2c463eabb5e2ab04f53c0dc9200125ce50330ed38b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a3bd5141e1b82f5c00a40d2c463eabb5e2ab04f53c0dc9200125ce50330ed38b.exe
Resource
win10v2004-20221111-en
General
-
Target
a3bd5141e1b82f5c00a40d2c463eabb5e2ab04f53c0dc9200125ce50330ed38b
-
Size
554KB
-
MD5
cea0269e828e46253c0738c130ffb634
-
SHA1
3a781da6555dba34200cedb707e0ad52353f4e9b
-
SHA256
a3bd5141e1b82f5c00a40d2c463eabb5e2ab04f53c0dc9200125ce50330ed38b
-
SHA512
43387c30845bf5379b73b6210f455605751c670f9ed5c83875d7e665b5dc53d94ff61e0884a68c58b3f49dfe774376c11bef458b7a4dd9b3d28c88de60e5533a
-
SSDEEP
12288:0yb1MPrrWXABI8VwTDDlM5kxaCIYy6cxKRI98/GSJYHqOv:0mMPrrXBISwRJaj/lqy
Malware Config
Signatures
Files
-
a3bd5141e1b82f5c00a40d2c463eabb5e2ab04f53c0dc9200125ce50330ed38b.exe windows x86
4db25b05d080bedd92f2392af87448f9
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
shlwapi
UrlUnescapeW
ws2_32
recv
comctl32
ImageList_Draw
shell32
SHChangeNotify
wininet
InternetGetLastResponseInfoW
mpr
WNetCancelConnection2W
user32
SetWindowTextW
gdi32
CreateBitmap
comdlg32
GetOpenFileNameW
ole32
CoInitialize
oleaut32
VarUI4FromStr
Sections
Size: 541KB - Virtual size: 888KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE