Static task
static1
Behavioral task
behavioral1
Sample
3471df4162aa1573efdd31fe23f24723adc4bb5f65af0babb06a2755ef255543.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
3471df4162aa1573efdd31fe23f24723adc4bb5f65af0babb06a2755ef255543.exe
Resource
win10v2004-20220901-en
General
-
Target
3471df4162aa1573efdd31fe23f24723adc4bb5f65af0babb06a2755ef255543
-
Size
818KB
-
MD5
4cb2ba72cf95f8e1303b8def45225a8d
-
SHA1
471f0eb2ae164636564ea4a391acea751d0d7108
-
SHA256
3471df4162aa1573efdd31fe23f24723adc4bb5f65af0babb06a2755ef255543
-
SHA512
5e7b829faae2fe0fb796c414f61b4a6749e4966ec4dd6aa7f9b80d26bd9eb0cfe9204d6b3dda679f757b0dbed6cd323b20e474c33357b81768727a7a64b7032c
-
SSDEEP
24576:5K4jsVcHUybnWkF1CcfaymDu+62BdROAE+FR2:5K4Q2HlWkLC8+62BdcAVm
Malware Config
Signatures
Files
-
3471df4162aa1573efdd31fe23f24723adc4bb5f65af0babb06a2755ef255543.exe windows x86
8cb13424853e55aa0fa05f2726f9c726
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentThreadId
Heap32First
VirtualFree
lstrcpynA
lstrcpynA
VirtualProtect
FindFirstVolumeA
GetModuleHandleA
GetSystemTime
SetThreadPriority
lstrcpynA
lstrcpynA
lstrcpynA
GetDriveTypeA
lstrcpynA
lstrcpynA
lstrcatA
GetCurrentDirectoryA
lstrcpynA
GetPrivateProfileIntA
GetFileType
ReadConsoleA
OpenMutexW
GetVolumeInformationA
lstrcpynA
WriteFile
lstrcmpW
GetDiskFreeSpaceW
lstrcpynA
comuid
DllGetClassObject
DllCanUnloadNow
DllRegisterServer
DllUnregisterServer
Sections
.text Size: 18KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 856B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ddata Size: 795KB - Virtual size: 3.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ydata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ