Static task
static1
Behavioral task
behavioral1
Sample
3f9c4d4b78521a046e55c389452a7da11552d745ad8693f94465b53c1b6be089.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
3f9c4d4b78521a046e55c389452a7da11552d745ad8693f94465b53c1b6be089.exe
Resource
win10v2004-20221111-en
General
-
Target
3f9c4d4b78521a046e55c389452a7da11552d745ad8693f94465b53c1b6be089
-
Size
63KB
-
MD5
20b5f84eb538a969839f88b29c67da60
-
SHA1
d68563cdc96ce83813d83bb20cbea94f7015428d
-
SHA256
3f9c4d4b78521a046e55c389452a7da11552d745ad8693f94465b53c1b6be089
-
SHA512
98935665e26055c1dace0d5ee61a6bca2bf99eb496bc23c868a19a77fd8b0adafb2123d84979df35e1dae08018b5b4a96856a9c1921c5b9934ab37c1c96782fd
-
SSDEEP
1536:SUlhdTCKCAuxlalWWfCQdVnIBsO7+si5ikmpxSW1LZj:SwhdTCFXWa2ZIBsOysd
Malware Config
Signatures
Files
-
3f9c4d4b78521a046e55c389452a7da11552d745ad8693f94465b53c1b6be089.exe windows x86
4e7245169fcf16e680c7120355d20ec5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcmpiW
Sleep
GetModuleFileNameA
IsValidLocale
OpenMutexA
GetModuleHandleA
lstrcmpiW
GetDriveTypeW
SetLastError
lstrcmpiW
HeapCreate
GetProcessHeap
GetLogicalDriveStringsW
lstrcmpiW
CreateNamedPipeW
DeleteFileA
GetVolumePathNameW
FileTimeToLocalFileTime
WaitForMultipleObjects
GetStdHandle
lstrcmpiW
CreateMailslotW
lstrlenA
scecli
DeltaNotify
SceOpenPolicy
InitializeChangeNotify
SceSysPrep
Sections
.text Size: 1KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.orpc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 56KB - Virtual size: 56KB
IMAGE_SCN_MEM_READ
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ