Static task
static1
Behavioral task
behavioral1
Sample
b3c6706fae68401540d0ec6531f9359c82d286c8fbf6faa0be84223d87bb6396.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b3c6706fae68401540d0ec6531f9359c82d286c8fbf6faa0be84223d87bb6396.exe
Resource
win10v2004-20220812-en
General
-
Target
b3c6706fae68401540d0ec6531f9359c82d286c8fbf6faa0be84223d87bb6396
-
Size
103KB
-
MD5
ec11a0eb1866cb1d9e07c79daf318ed3
-
SHA1
697fe91186ecde06ea8d1119be46e16f6b4a614a
-
SHA256
b3c6706fae68401540d0ec6531f9359c82d286c8fbf6faa0be84223d87bb6396
-
SHA512
aac4c81e685929830b26f5c4b9efc8c52b3ca2d0a175217ac7fc349e96ed34a50888bdbbee2bd47286fb735391ca9a7e58deb77e8a7cef4f4a9440fd7451352b
-
SSDEEP
3072:hH5AlCGra59VdYYpQ6jSFOaC2YS89jcpxkheLMT2IWup+XG2dr:J5SCa85/2OaHV3pxbMT2v4+Xrdr
Malware Config
Signatures
Files
-
b3c6706fae68401540d0ec6531f9359c82d286c8fbf6faa0be84223d87bb6396.exe windows x86
6a3d7223bee9ce0b08a46d6a7330d5ce
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comdlg32
ChooseColorA
msvcrt
__set_app_type
_onexit
_initterm
_adjust_fdiv
exit
calloc
memset
_exit
strcmp
free
atan
_except_handler3
__p__fmode
_write
_cexit
__p__commode
memcpy
printf
memmove
_acmdln
__setusermatherr
__getmainargs
abort
getenv
_XcptFilter
kernel32
VirtualProtect
SetStdHandle
MulDiv
RemoveDirectoryA
GetLocaleInfoW
GetStartupInfoA
CreateDirectoryA
ole32
ReleaseStgMedium
StgOpenStorageOnILockBytes
CLSIDFromString
CreateStreamOnHGlobal
CoGetMalloc
OleDraw
CoDisconnectObject
OleSetClipboard
oleaut32
SafeArrayRedim
LoadTypeLib
GetErrorInfo
SetErrorInfo
CreateErrorInfo
comctl32
ImageList_SetIconSize
ImageList_Create
InitializeFlatSB
ImageList_DragEnter
DestroyPropertySheetPage
ImageList_LoadImageA
gdi32
GetTextExtentExPointW
ExtCreatePen
GetBkMode
GdiFlush
GetPaletteEntries
GetROP2
GetTextExtentPoint32W
SetPolyFillMode
user32
DestroyIcon
InsertMenuA
KillTimer
RedrawWindow
DrawFrameControl
ScreenToClient
DestroyWindow
shell32
ShellExecuteExW
SHGetSpecialFolderPathA
SHAppBarMessage
ShellExecuteA
advapi32
RegCloseKey
IsValidSid
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 62KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 33KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ