Static task
static1
Behavioral task
behavioral1
Sample
c3081b331050e798bc18ec819d3bec783d4bbf87a25efec321dae62117ae0684.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c3081b331050e798bc18ec819d3bec783d4bbf87a25efec321dae62117ae0684.exe
Resource
win10v2004-20221111-en
General
-
Target
c3081b331050e798bc18ec819d3bec783d4bbf87a25efec321dae62117ae0684
-
Size
170KB
-
MD5
3f870988fb137d35f7e6c29034e8ddbc
-
SHA1
4695f1710f0a970ab95976692cbad54bc25c5a46
-
SHA256
c3081b331050e798bc18ec819d3bec783d4bbf87a25efec321dae62117ae0684
-
SHA512
f4d60f89064fff911da93a13e060a3de82644b1c2507a07d4d7dae87f08a64833447b8ef7e36603c2fa449749822ca6cd14235bd47d7e1d06e1a380c33a17c6e
-
SSDEEP
3072:nSqmDtbB44mHZahYTZKv3sZCbZKFYQ8L0vB+P/rq1dbxt5kQ:nbSGBHZahcZKkyKFYhLuxxt5kQ
Malware Config
Signatures
Files
-
c3081b331050e798bc18ec819d3bec783d4bbf87a25efec321dae62117ae0684.exe windows x86
d4a27fb175aecc53b250835799d9434d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
setupapi
CM_Get_Global_State
SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status
kernel32
lstrcmpiA
EnterCriticalSection
LeaveCriticalSection
Sleep
WideCharToMultiByte
lstrcpyA
AddAtomA
UnhandledExceptionFilter
lstrcmpA
LCMapStringW
GetStringTypeW
GetStringTypeA
DeleteCriticalSection
CloseHandle
GetStartupInfoA
WriteFile
lstrcpynA
ReadFile
GetFileAttributesA
GetEnvironmentStringsW
FreeLibrary
GetThreadLocale
GetEnvironmentStrings
GetFullPathNameA
GetOEMCP
GetCPInfo
CreateFileA
FreeEnvironmentStringsW
IsBadCodePtr
GetTickCount
EnumResourceNamesW
GetCurrentThreadId
SetStdHandle
GetLastError
GetModuleHandleA
SetFilePointer
GetProcAddress
GetDiskFreeSpaceA
lstrlenW
InitializeCriticalSection
lstrlenA
LCMapStringA
MulDiv
FreeEnvironmentStringsA
IsBadReadPtr
VirtualProtect
SetUnhandledExceptionFilter
LoadLibraryA
FlushFileBuffers
FindFirstFileA
MultiByteToWideChar
lstrcatA
RaiseException
Sections
.text Size: 91KB - Virtual size: 490KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 75KB - Virtual size: 75KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ