Static task
static1
Behavioral task
behavioral1
Sample
c3db5fbbd9637a1a4ef23a2b51e0e8d245b2c8dac29b4a9107f41866422cb054.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c3db5fbbd9637a1a4ef23a2b51e0e8d245b2c8dac29b4a9107f41866422cb054.exe
Resource
win10v2004-20220812-en
General
-
Target
c3db5fbbd9637a1a4ef23a2b51e0e8d245b2c8dac29b4a9107f41866422cb054
-
Size
303KB
-
MD5
8f0dba1befc0fdd30b8f292e0e0e8c5e
-
SHA1
6b5f9ec5d40ea1716f773969e5e223963219e84f
-
SHA256
c3db5fbbd9637a1a4ef23a2b51e0e8d245b2c8dac29b4a9107f41866422cb054
-
SHA512
3dc3b0b012738bb03ff9f8dc06583812047aa4e17034d5e73122d4a850a59027bdf1b4aa947c4a9bac5130dcb6f66070e04771198c8ead12f18364efc3bed4fe
-
SSDEEP
6144:kwLklilskBs5bcueJvy6x4MtNonwBgELQlUW8KQgRLgMMK:pLdl4+VFnonIgEElUW8K3hg
Malware Config
Signatures
Files
-
c3db5fbbd9637a1a4ef23a2b51e0e8d245b2c8dac29b4a9107f41866422cb054.exe windows x86
9dabf42f112b4ce768ef49a8d34883c6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
RemoveDirectoryA
GetCommandLineW
ResetEvent
CreateFileA
OpenProcess
CreateMutexA
CreatePipe
HeapSize
GetFileAttributesA
DeleteFileA
GetStartupInfoW
VirtualAlloc
GetEnvironmentVariableW
GetModuleHandleA
CloseHandle
Sleep
GetTickCount
GetCurrentDirectoryA
ExitProcess
GetStdHandle
WaitForMultipleObjects
GetConsoleTitleA
SetLastError
FindClose
WaitForSingleObject
user32
PeekMessageA
GetDC
MessageBoxA
DispatchMessageW
CallWindowProcW
GetWindowLongA
DispatchMessageW
GetDC
FillRect
GetClassInfoA
FindWindowW
GetSysColor
GetDC
ureg
??1REGISTRY@@UAE@XZ
??1REGISTRY@@UAE@XZ
??1REGISTRY@@UAE@XZ
??1REGISTRY@@UAE@XZ
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 10B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 296KB - Virtual size: 296KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ