Static task
static1
Behavioral task
behavioral1
Sample
e3c314230dc0592a362974479733619b79521ace2c6aa300dfd042624ad7a717.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e3c314230dc0592a362974479733619b79521ace2c6aa300dfd042624ad7a717.exe
Resource
win10v2004-20221111-en
General
-
Target
e3c314230dc0592a362974479733619b79521ace2c6aa300dfd042624ad7a717
-
Size
120KB
-
MD5
367759adfce6ab698c390c221acd0cfa
-
SHA1
707f13f6d9a04697663f3207afbf20360430ae08
-
SHA256
e3c314230dc0592a362974479733619b79521ace2c6aa300dfd042624ad7a717
-
SHA512
55f997b1c30cf670e21af5b14291cd6bb08ccc522f2322e452e1e5845e594a820ca3b9439cf6e211339138c1dcdd5a3963fff38ecb9f1e5ec1969e6f540e2413
-
SSDEEP
3072:DnU1yQ9fIR7c0Y66MSnWDue+VNg23zO89Rk:rU79kc0AMSWDue+VmrSm
Malware Config
Signatures
Files
-
e3c314230dc0592a362974479733619b79521ace2c6aa300dfd042624ad7a717.exe windows x86
a59c754fc1b3141b7fd6fce7a962d065
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
GlobalAlloc
GlobalFree
LockResource
LoadResource
SizeofResource
GetModuleFileNameA
CreateMutexA
OpenMutexA
FindResourceA
GetStartupInfoA
user32
GetActiveWindow
MessageBoxA
msvcrt
__getmainargs
??3@YAXPAX@Z
printf
sprintf
memmove
??2@YAPAXI@Z
strncpy
_exit
_XcptFilter
exit
_acmdln
malloc
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
Sections
.text Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 948B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 92KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ