Static task
static1
Behavioral task
behavioral1
Sample
f3c6211ad76333c2c34cf3fb7f028b199edab8330894026c95ebcd1cdec9f2a9.exe
Resource
win10-20220812-en
General
-
Target
f3c6211ad76333c2c34cf3fb7f028b199edab8330894026c95ebcd1cdec9f2a9
-
Size
7.0MB
-
MD5
077f4724c5043fd536d34db4a2c10ac1
-
SHA1
447808484ab3f9a3b0726f889a6651341749fd47
-
SHA256
f3c6211ad76333c2c34cf3fb7f028b199edab8330894026c95ebcd1cdec9f2a9
-
SHA512
a18b4a2785d6f37b369d05ddcceaecfe921bde72848796863139dc601bceca4214e9f2008596925614bab787a095ab619068b83dfb98cec12afcdd6f1cf7c3a5
-
SSDEEP
98304:x3K2Gu/r+Rd47cGaMjvRJ1poSXP/QdueuMRf8mh1G/5YQ+gCOZ3JNIhsuxHfCXhu:x3Kar+AaKvRJjf0rGCE/Lmsq/UJ0H
Malware Config
Signatures
Files
-
f3c6211ad76333c2c34cf3fb7f028b199edab8330894026c95ebcd1cdec9f2a9.exe windows x64
19f041dde2e6babdd4b55b8cfcf6b4bf
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
GetModuleFileNameA
GetVersion
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
ShowWindow
CharUpperBuffW
shell32
ShellExecuteA
Sections
.text Size: - Virtual size: 202KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
MOV*LJM( Size: - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
AICN)AZD Size: - Virtual size: 3.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
)V^J)#RJ Size: - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
*P)AAN$R Size: - Virtual size: 348B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
$%WYRGSD Size: - Virtual size: 3.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
$%WYRGSD Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
$%WYRGSD Size: 7.0MB - Virtual size: 7.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
XMJM$%CK Size: 512B - Virtual size: 469B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ