Static task
static1
Behavioral task
behavioral1
Sample
3ff8bd8223d833c6f69717e177def5824fe614829bde242a809cd17f1031152b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
3ff8bd8223d833c6f69717e177def5824fe614829bde242a809cd17f1031152b.exe
Resource
win10v2004-20220812-en
General
-
Target
3ff8bd8223d833c6f69717e177def5824fe614829bde242a809cd17f1031152b
-
Size
298KB
-
MD5
4c628e99f1baa53ef30db99e59a5812b
-
SHA1
edc9b4bacf53b3f7687c1ad607700dd652739684
-
SHA256
3ff8bd8223d833c6f69717e177def5824fe614829bde242a809cd17f1031152b
-
SHA512
ed31882a1f4715cc7f1e85e51585afbdcc3a6245b44fcd8608b4f06ea5850bc2a96af9b0712e4b2f8572c80adf7707743852e9c68d4112280ecf0328df62b83c
-
SSDEEP
6144:D7WBI9H3jwZ1Om5bXFVdIty9xdwEvIx6LC/aW:HWBuEZ5bXFfIty9xiEva6LG
Malware Config
Signatures
Files
-
3ff8bd8223d833c6f69717e177def5824fe614829bde242a809cd17f1031152b.exe windows x86
b1aae7e46101315e7f8cbe524325b07a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLongPathNameW
GetSystemTimeAsFileTime
lstrlenW
GetEnvironmentStringsW
ReadFileScatter
RaiseException
GetThreadSelectorEntry
GetProcessHeaps
ExitProcess
GetCurrentProcessId
Sleep
GetExitCodeProcess
GetVersion
GetComputerNameA
GetProfileStringW
VirtualFreeEx
FreeLibrary
MapViewOfFileEx
SignalObjectAndWait
WriteFileEx
LocalFree
VirtualAllocEx
DeleteCriticalSection
FindNextChangeNotification
GetSystemTime
GetProcAddress
LoadLibraryA
GetFileTime
LockFileEx
LockFile
VirtualAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
SetHandleCount
GetStdHandle
GetFileType
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
HeapAlloc
GetCPInfo
GetACP
GetOEMCP
HeapReAlloc
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
Sections
.text Size: 270KB - Virtual size: 270KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 13KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ