Static task
static1
Behavioral task
behavioral1
Sample
f3154bc8ed9d2efe21a7c853b845ba6a14e0702bf6c95bce2754de3d9aa71ccc.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
f3154bc8ed9d2efe21a7c853b845ba6a14e0702bf6c95bce2754de3d9aa71ccc.exe
Resource
win10v2004-20220812-en
General
-
Target
f3154bc8ed9d2efe21a7c853b845ba6a14e0702bf6c95bce2754de3d9aa71ccc
-
Size
171KB
-
MD5
b1ae00911b7a64c4ca218a4940007837
-
SHA1
c6a837dc929ecd19af5782f2d71483e31c6ca9ac
-
SHA256
f3154bc8ed9d2efe21a7c853b845ba6a14e0702bf6c95bce2754de3d9aa71ccc
-
SHA512
5c15282dd3b21f88dbefece5e1dd457ce2d52c82f33dd8197f297c83d61a85e8581a978444490d20162409359f854eaf378cd534431b632f98eaa7471567e91e
-
SSDEEP
3072:FqpmN/mHcgKUK2Nb29jVckAuGnjmN9IP/QYQ0iunQsR69x:FqQNeHcgKmV29jVcUAjmNWHQcxnRE9
Malware Config
Signatures
Files
-
f3154bc8ed9d2efe21a7c853b845ba6a14e0702bf6c95bce2754de3d9aa71ccc.exe windows x86
97688078796eddfa8764408d239466e5
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
InitializeCriticalSection
GetAtomNameW
GetTickCount
LoadLibraryW
LoadLibraryA
GetProcAddress
SetEvent
DeleteCriticalSection
ResetEvent
FileTimeToSystemTime
CreateThread
EnumResourceNamesA
IsDBCSLeadByte
OutputDebugStringA
WaitForSingleObject
LeaveCriticalSection
QueryMemoryResourceNotification
GetTempPathA
EnterCriticalSection
GetTimeZoneInformation
GetFullPathNameW
GetFullPathNameA
Sleep
lstrcpyA
FreeLibrary
setupapi
InstallCatalog
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status
winmm
mciSendCommandA
sndPlaySoundA
shlwapi
PathAddBackslashA
msimg32
AlphaBlend
TransparentBlt
Sections
.text Size: 93KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 74KB - Virtual size: 74KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ