Static task
static1
Behavioral task
behavioral1
Sample
a3bc708b0a4e48c6db57e344fadfab260331f5f4c5753d134c3db2f66fb8d634.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
a3bc708b0a4e48c6db57e344fadfab260331f5f4c5753d134c3db2f66fb8d634.exe
Resource
win10v2004-20220812-en
General
-
Target
a3bc708b0a4e48c6db57e344fadfab260331f5f4c5753d134c3db2f66fb8d634
-
Size
100KB
-
MD5
2002ab3264206419453318fcddbe40d1
-
SHA1
768251c7b4caafa702471b2833ea787323eae100
-
SHA256
a3bc708b0a4e48c6db57e344fadfab260331f5f4c5753d134c3db2f66fb8d634
-
SHA512
0fafc835b1bcd5d616816d093b21141fab7022903a7fad8df3dd29c39a564e05694347d9ba4659f1d0232f609893bc8852ae66752fe894f4f08f9b85d5b330a3
-
SSDEEP
3072:meX+y9eCIQMrcwOf3aZEXy0HifOGW3L7U4C:mi54CsjKXy0CmRLQP
Malware Config
Signatures
Files
-
a3bc708b0a4e48c6db57e344fadfab260331f5f4c5753d134c3db2f66fb8d634.exe windows x86
6b371078c72a066e43bd55a86835683e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
MultiByteToWideChar
GetCurrentProcess
GetWindowsDirectoryA
IsBadReadPtr
SetFilePointer
CreateProcessA
DeleteFileA
GetTickCount
GetModuleHandleA
ole32
OleSetContainedObject
OleCreate
CoUninitialize
CoInitialize
user32
DestroyWindow
SetWindowLongA
CreateWindowExA
DefWindowProcA
PostQuitMessage
UpdateWindow
GetWindowLongA
TranslateMessage
MessageBoxA
ShowWindow
DispatchMessageA
advapi32
RegCloseKey
RegSetValueExA
RegDeleteKeyA
shell32
SHGetPathFromIDListA
SHGetMalloc
SHGetSpecialFolderLocation
Sections
.text Size: 60KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1006B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ