Static task
static1
Behavioral task
behavioral1
Sample
a3d1782c87cb5adbe058d1f5ed700402e35b8f689f1d1e3a216624e2e175cc99.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a3d1782c87cb5adbe058d1f5ed700402e35b8f689f1d1e3a216624e2e175cc99.exe
Resource
win10v2004-20221111-en
General
-
Target
a3d1782c87cb5adbe058d1f5ed700402e35b8f689f1d1e3a216624e2e175cc99
-
Size
128KB
-
MD5
dd4017e9dd12f94645c13e9eeb5a14b1
-
SHA1
012af0c6d35293b218a7d00f33ebc30365e84304
-
SHA256
a3d1782c87cb5adbe058d1f5ed700402e35b8f689f1d1e3a216624e2e175cc99
-
SHA512
aa61a11ce29e9cf2388eb51602aa20e942a3cc535daff63d51b3eb392c9ef46e6a68527a5b3bdf2407f6874bc7245975900276dfc104792bfddeacd7eff67d08
-
SSDEEP
3072:bdHLB1o6unkGUsVvKPnkZ7wl4YXz2hUZ8/jZ5/YE:bddFuCsEnE77YXzIN1YE
Malware Config
Signatures
Files
-
a3d1782c87cb5adbe058d1f5ed700402e35b8f689f1d1e3a216624e2e175cc99.exe windows x86
3ba2c401468a5c601d6205bd97b7ed2a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTickCount
CreateFileA
GetProcAddress
GetModuleHandleA
GetLastError
LocalAlloc
GetModuleFileNameA
LockResource
LoadResource
SizeofResource
FindResourceA
CreateMutexA
OpenMutexA
GetStartupInfoA
user32
MessageBoxA
msvcrt
_adjust_fdiv
??2@YAPAXI@Z
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
strncpy
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
Sections
.text Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 874B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 92KB - Virtual size: 120KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE