Static task
static1
Behavioral task
behavioral1
Sample
c3640fbd9d51690ae3850e3dfc3d3f58da6e4ac569928eb28c15d6ecc36f89e9.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
c3640fbd9d51690ae3850e3dfc3d3f58da6e4ac569928eb28c15d6ecc36f89e9.exe
Resource
win10v2004-20220812-en
General
-
Target
c3640fbd9d51690ae3850e3dfc3d3f58da6e4ac569928eb28c15d6ecc36f89e9
-
Size
6KB
-
MD5
d7566d91ef992c5d74111110f73899b4
-
SHA1
f75324ca09bdb38fd4939624b399fc1fc13b68c5
-
SHA256
c3640fbd9d51690ae3850e3dfc3d3f58da6e4ac569928eb28c15d6ecc36f89e9
-
SHA512
6194af1760ec261b799fead222b1ad4a605354c2d3c5b4761f48fedda90053198084eebdd705d00b1cb1b4dbb98e16d2ba2f8d50affb5e96fca429097ecfaadb
-
SSDEEP
96:ZDEMVbLTNw/GljpxBURhOHpIuHR2r5s5K7BNRFURsRHQ:dEKHTNw/GljvBURh6pZR2rOKjp
Malware Config
Signatures
Files
-
c3640fbd9d51690ae3850e3dfc3d3f58da6e4ac569928eb28c15d6ecc36f89e9.exe windows x86
f6be1257becd9e944167165cc0df826e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
CloseServiceHandle
ControlService
DeleteService
OpenSCManagerA
OpenServiceA
RegCloseKey
RegCreateKeyA
RegOpenKeyA
RegSetValueExA
user32
SetWindowTextA
GetWindowTextA
GetForegroundWindow
BlockInput
kernel32
lstrlenA
lstrcpyA
lstrcmpiA
lstrcatA
CloseHandle
CopyFileA
CreateFileA
DeleteFileA
ExitProcess
FreeLibrary
GetDriveTypeA
GetLogicalDriveStringsA
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetTempFileNameA
GetTempPathA
GetWindowsDirectoryA
GlobalAlloc
LoadLibraryA
RtlZeroMemory
SetFileAttributesA
SetFilePointer
Sleep
WinExec
WriteFile
wininet
InternetGetConnectedState
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE