Static task
static1
Behavioral task
behavioral1
Sample
3a54aa42aa42cd6caef06df0aea06491d995db48cf79b1ac8e021cc3b5063223.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
3a54aa42aa42cd6caef06df0aea06491d995db48cf79b1ac8e021cc3b5063223.exe
Resource
win10v2004-20220812-en
General
-
Target
3a54aa42aa42cd6caef06df0aea06491d995db48cf79b1ac8e021cc3b5063223
-
Size
4.9MB
-
MD5
13cf58a0058dfe261623d968c0422ca8
-
SHA1
e1d3be4eb0efc6a03a0b51790d5ec662d17df298
-
SHA256
3a54aa42aa42cd6caef06df0aea06491d995db48cf79b1ac8e021cc3b5063223
-
SHA512
91cc450bcb54db115b5a15b5a2fe849839f7c81a276e19677a11b5ef01d4ea87abb81ceaf97a16f979fcc9ef23020d68050cba3393c7743095c0de65e0b3987c
-
SSDEEP
98304:xO5+MRroZRYqdwkLcHHko9Bn3xOGYcaChQ:xO5+MRyjAko9B35YshQ
Malware Config
Signatures
Files
-
3a54aa42aa42cd6caef06df0aea06491d995db48cf79b1ac8e021cc3b5063223.exe windows x86
0fbcc6045dd2a9a7369749b721155e00
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
rasapi32
RasHangUpA
winmm
midiStreamOut
ws2_32
socket
kernel32
MultiByteToWideChar
user32
GetWindowThreadProcessId
gdi32
GetTextMetricsA
winspool.drv
OpenPrinterA
advapi32
RegCreateKeyExA
shell32
ShellExecuteA
ole32
CLSIDFromProgID
oleaut32
SafeArrayUnaccessData
comctl32
ImageList_Destroy
wininet
InternetCanonicalizeUrlA
comdlg32
ChooseFontA
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.text Size: 2.8MB - Virtual size: 2.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ