Static task
static1
Behavioral task
behavioral1
Sample
f3e5c2c756b268fc9682ece4e57e3b9e4e7720022d8345b6fafbc57fec60dc5d.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
f3e5c2c756b268fc9682ece4e57e3b9e4e7720022d8345b6fafbc57fec60dc5d.exe
Resource
win10v2004-20221111-en
General
-
Target
f3e5c2c756b268fc9682ece4e57e3b9e4e7720022d8345b6fafbc57fec60dc5d
-
Size
51KB
-
MD5
f4a67458cd603e4cd23a589813b985aa
-
SHA1
be991ecf77c877ef4b8e209f6b2e7009b682d6ec
-
SHA256
f3e5c2c756b268fc9682ece4e57e3b9e4e7720022d8345b6fafbc57fec60dc5d
-
SHA512
7356a8595bda8a1b039f5e94da9ca226bcffc16c662d7e76a3042800a425d659eb761ab2830b1f4dbefaa1b40ef44f2d1f4127b9d78b5c50e6ac299ecb28c84e
-
SSDEEP
1536:1zj1XDnet0P6kSYIS518JDqAgRh55c09SWtY:1/trPSuu2AgP55csO
Malware Config
Signatures
Files
-
f3e5c2c756b268fc9682ece4e57e3b9e4e7720022d8345b6fafbc57fec60dc5d.exe windows x86
b8de10305cb90e4c2520b5e1805f7268
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetEvent
TlsGetValue
IsDBCSLeadByte
CompareStringA
GetConsoleCP
TlsFree
ReleaseMutex
GetModuleHandleA
CreateMutexA
GetDefaultCommConfigW
GetThreadPriority
VirtualAlloc
CreatePipe
GetThreadTimes
CancelWaitableTimer
GetExitCodeThread
GetLargestConsoleWindowSize
GetUserDefaultLangID
GetThreadLocale
GetOEMCP
AddAtomA
user32
GetFocus
GetDC
ShowWindow
ReleaseDC
CloseWindow
GetWindow
GetWindowTextLengthA
ReleaseDC
IsIconic
InvalidateRect
ValidateRect
GetSystemMetrics
GetForegroundWindow
GetActiveWindow
GetClassInfoExA
GetWindowTextA
IsWindowVisible
GetClassNameA
RegisterClassA
tapi32
MMCShutdown
MMCSetLineInfo
MMCSetServerConfig
MMCSetPhoneInfo
MMCInitialize
mlang
DllGetClassObject
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ