Static task
static1
Behavioral task
behavioral1
Sample
3d41cf0a0f09d68283f53ae4b021481aa60fce397501da5158598877542be47f.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
3d41cf0a0f09d68283f53ae4b021481aa60fce397501da5158598877542be47f.exe
Resource
win10v2004-20220901-en
General
-
Target
3d41cf0a0f09d68283f53ae4b021481aa60fce397501da5158598877542be47f
-
Size
816KB
-
MD5
145782273e9dd00146878dbf8b22b278
-
SHA1
a250613f3d0fb2f018016385a707cad9fc7ec459
-
SHA256
3d41cf0a0f09d68283f53ae4b021481aa60fce397501da5158598877542be47f
-
SHA512
8466513723b927eba3383ac1b797d2f0ae93a6ba7305e58e8339180db760aee24d1dd4a89c63ace9fdef0b2b642ae2ac38ada82a3b744ba92ccb093ca2bd32ef
-
SSDEEP
24576:Sajo67fttAoh1UsjIKucUbamq1uGaBUHpaIN/:pJjAuUqIKuUUvUn
Malware Config
Signatures
Files
-
3d41cf0a0f09d68283f53ae4b021481aa60fce397501da5158598877542be47f.exe windows x86
748f922d7a4ece4e3d8121585b0d0b1e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
ReadFile
GetFileSize
lstrcmpA
FormatMessageW
lstrlenA
GetModuleHandleA
lstrlenA
OpenMutexA
CreateDirectoryW
GetDiskFreeSpaceW
lstrlenA
lstrlenA
WriteConsoleW
lstrcatA
GetPrivateProfileIntA
lstrlenA
lstrlenA
SetThreadPriority
lstrlenA
DeleteFileW
lstrlenA
GetCurrentDirectoryA
VirtualFree
VirtualProtect
GetCurrentThreadId
GetCommandLineA
lstrlenA
TlsGetValue
lstrlenA
certcli
CADeleteCA
CAEnumNextCA
CADeleteCertType
CAEnumFirstCA
Sections
.text Size: 17KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.pdata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 795KB - Virtual size: 3.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE