Static task
static1
Behavioral task
behavioral1
Sample
f3ca2fdcf7b59eca4666dc1f387dc3a552dfe11283ef7abf6015e4c37e27f06c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f3ca2fdcf7b59eca4666dc1f387dc3a552dfe11283ef7abf6015e4c37e27f06c.exe
Resource
win10v2004-20221111-en
General
-
Target
f3ca2fdcf7b59eca4666dc1f387dc3a552dfe11283ef7abf6015e4c37e27f06c
-
Size
276KB
-
MD5
d86da9159ba78bbc46d71fd49cf7fcda
-
SHA1
c4a339eb98d2940c2d24494267df09fc49058f66
-
SHA256
f3ca2fdcf7b59eca4666dc1f387dc3a552dfe11283ef7abf6015e4c37e27f06c
-
SHA512
c2a716892f88eac2b7d2d6c6baf922ad0ca12ef60fc14f284e0c84a07faa1d1d2b91f9b2e8824490835c9f201c0bfb636bb58973f02c959e5bec779003539884
-
SSDEEP
6144:EKfOSPst/ESN3tO4HKXbEpQF33iuugLHTM1OGfipu:EMOSPHSx44HKLEpHuu82f4
Malware Config
Signatures
Files
-
f3ca2fdcf7b59eca4666dc1f387dc3a552dfe11283ef7abf6015e4c37e27f06c.exe windows x86
547629be260f1399650d3e4668f85e9d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
setupapi
CM_Get_Depth
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status
msvcrt
__p__commode
_ismbblead
exit
_vsnwprintf
_acmdln
memset
__p__fmode
_exit
__set_app_type
_amsg_exit
_cexit
__getmainargs
_initterm
_XcptFilter
_vsnprintf
?terminate@@YAXXZ
__setusermatherr
_controlfp
kernel32
TlsSetValue
HeapFree
GlobalMemoryStatus
GetCommandLineA
GetStdHandle
AddAtomW
GetCurrentProcessId
GetCurrentThread
SetHandleCount
TlsGetValue
GetSystemTimeAsFileTime
SetLastError
GetModuleFileNameA
GetCurrentProcess
SetUnhandledExceptionFilter
TlsAlloc
TlsFree
EnumResourceNamesA
GetDiskFreeSpaceA
TerminateProcess
QueryPerformanceCounter
GetVersion
DeviceIoControl
GetStartupInfoA
CloseHandle
GetModuleHandleW
RaiseException
GetTickCount
GetComputerNameA
OutputDebugStringW
RtlUnwind
GetProcessHeap
GetFileType
GetLocalTime
GetVersionExA
HeapAlloc
InterlockedExchange
Sections
.text Size: 136KB - Virtual size: 136KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 136KB - Virtual size: 135KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 392KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ