Static task
static1
Behavioral task
behavioral1
Sample
ac3dbfebd1c21381049aed93d28ee1ef5bf75841a4ecf9519a399fbfaaff5894.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
ac3dbfebd1c21381049aed93d28ee1ef5bf75841a4ecf9519a399fbfaaff5894.exe
Resource
win10v2004-20220901-en
General
-
Target
ac3dbfebd1c21381049aed93d28ee1ef5bf75841a4ecf9519a399fbfaaff5894
-
Size
323KB
-
MD5
d999f157ec0da2a76adc37d6daa43395
-
SHA1
29bc082951ac08c9ef76dd550045e9d6e1815c37
-
SHA256
ac3dbfebd1c21381049aed93d28ee1ef5bf75841a4ecf9519a399fbfaaff5894
-
SHA512
f4b7fa65c58c412589d0d67d006108da95e1b4c3d8b01232d1956ee79371aed404db1aef18cba58dcb329462095b93305354e15feac3ab5c8aa0ba3f7244757c
-
SSDEEP
6144:Qepz9UUwJiEd+zo8ME/4i/g/J/XEJ9EmBl0pLcpwZUuaefkh:Q0z9Jw5+zo8jwi/g/J/XcEcl0lczua1
Malware Config
Signatures
Files
-
ac3dbfebd1c21381049aed93d28ee1ef5bf75841a4ecf9519a399fbfaaff5894.exe windows x86
2c7124e3ff5d5dd100fdd595349f1282
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetLastError
ResetEvent
VirtualAlloc
GetModuleHandleA
Sleep
VirtualFree
GetModuleFileNameA
ExitProcess
IsBadCodePtr
GetEnvironmentStrings
GetExitCodeThread
user32
MoveWindow
LoadIconA
GetClientRect
BeginPaint
netapi32
NetDfsAdd
psapi
GetModuleBaseNameA
GetProcessMemoryInfo
EmptyWorkingSet
msvfw32
ICCompressorFree
DrawDibClose
Sections
.text Size: 104KB - Virtual size: 101KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 768B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 132B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 206KB - Virtual size: 541KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.sdata Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.wdata Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE