Static task
static1
Behavioral task
behavioral1
Sample
c3d7da103203b77f2d23f38366d752c25c107a5d5d753a05f109fa1334c160f1.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c3d7da103203b77f2d23f38366d752c25c107a5d5d753a05f109fa1334c160f1.exe
Resource
win10v2004-20220901-en
General
-
Target
c3d7da103203b77f2d23f38366d752c25c107a5d5d753a05f109fa1334c160f1
-
Size
108KB
-
MD5
25c92d167b18bd8254459446c7c68b6c
-
SHA1
6788fd9f81c5198ddee2303348e74cade96c653c
-
SHA256
c3d7da103203b77f2d23f38366d752c25c107a5d5d753a05f109fa1334c160f1
-
SHA512
579721723a6952f19dc5503a6807adaa1ef98abb43d43dc91cf00743a96557f3a84d8119de8f503873fe97368d8246b0987dda863d012ed43e4b171ad2805616
-
SSDEEP
3072:gLgFrsm1uoJEdSX/6LnHzan0gqa88spBfH/:IurSdgSDzan08sP
Malware Config
Signatures
Files
-
c3d7da103203b77f2d23f38366d752c25c107a5d5d753a05f109fa1334c160f1.exe windows x86
27804638702373966510cb43f777bb0b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
GetModuleHandleA
RtlUnwind
HeapFree
HeapAlloc
GetCommandLineA
GetVersion
ExitProcess
HeapDestroy
HeapCreate
VirtualFree
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
VirtualAlloc
HeapReAlloc
InterlockedDecrement
InterlockedIncrement
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
GetLastError
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
WriteFile
SetFilePointer
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetCPInfo
GetACP
GetOEMCP
SetStdHandle
FlushFileBuffers
CloseHandle
Sections
.text Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 52KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ