Static task
static1
Behavioral task
behavioral1
Sample
341b1e09ee2dc6154b204ca832557b8a0a1e81bde851f0e88de0f5f903155d64.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
341b1e09ee2dc6154b204ca832557b8a0a1e81bde851f0e88de0f5f903155d64.exe
Resource
win10v2004-20220812-en
General
-
Target
341b1e09ee2dc6154b204ca832557b8a0a1e81bde851f0e88de0f5f903155d64
-
Size
163KB
-
MD5
4d98e099d57097e7a61194eee900e840
-
SHA1
9d508a239ecbadedd745d170d7d64e5353c608f2
-
SHA256
341b1e09ee2dc6154b204ca832557b8a0a1e81bde851f0e88de0f5f903155d64
-
SHA512
95c309406a78e0e2f4e742cc91a9dafa832699a3f3c918a2e5217994a797e825a4bff61c5e9c6fc232d518a9f22342c89edfd83a10129aa8c1fbd61dcb364d72
-
SSDEEP
3072:jlBF1CObc462TPYUwfHkyCzooR8IHHNsTxi2HePfrTjdxtkxEtm:pP1COb02TPh4HktznRdNsThevSx/
Malware Config
Signatures
Files
-
341b1e09ee2dc6154b204ca832557b8a0a1e81bde851f0e88de0f5f903155d64.exe windows x86
c5fc9800b9f015733c96521b01d2ac66
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FlushFileBuffers
DuplicateHandle
FileTimeToLocalFileTime
MapViewOfFile
InterlockedDecrement
GlobalLock
QueryPerformanceFrequency
VirtualFree
lstrcpyA
GetTimeFormatA
IsBadStringPtrW
GetDateFormatA
GetStartupInfoA
LCMapStringW
GetCurrentDirectoryA
WaitForMultipleObjects
SetUnhandledExceptionFilter
LoadResource
GetOEMCP
TlsFree
FindResourceA
WriteFile
GetDriveTypeA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetCommandLineA
GetFileAttributesA
IsBadStringPtrA
ExitThread
GetModuleHandleA
CreateEventA
CreateProcessA
GetProcessWorkingSetSize
Module32First
GlobalMemoryStatus
GetACP
TlsAlloc
Sleep
FormatMessageA
HeapReAlloc
GetConsoleMode
GetExitCodeThread
user32
PeekMessageA
OffsetRect
ReleaseCapture
InvalidateRect
GetWindowPlacement
TrackPopupMenuEx
LoadAcceleratorsA
LoadStringA
GetWindowTextA
LoadMenuA
GetClassNameA
GetWindowRect
CreateIconIndirect
PostQuitMessage
SendMessageTimeoutA
IsDlgButtonChecked
ScreenToClient
PtInRect
RedrawWindow
IsWindowVisible
GetClassLongA
LoadImageA
IsIconic
AppendMenuA
FrameRect
ModifyMenuA
IntersectRect
GetWindowDC
MsgWaitForMultipleObjects
GetSysColorBrush
CreateDialogParamA
GetClientRect
GetDlgItem
EndDeferWindowPos
GetWindowLongA
UpdateWindow
GetMessageA
DrawEdge
msvcrt
__p__commode
__set_app_type
memcpy
__setusermatherr
exit
_controlfp
_XcptFilter
__p__fmode
_initterm
__getmainargs
_acmdln
_except_handler3
_exit
_adjust_fdiv
Sections
.text Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 130KB - Virtual size: 130KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 164B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ