Static task
static1
Behavioral task
behavioral1
Sample
3a608eb3b749951029e85f41f675cc6371d38410611112478a4636237e809e95.exe
Resource
win7-20220812-en
General
-
Target
3a608eb3b749951029e85f41f675cc6371d38410611112478a4636237e809e95
-
Size
2.2MB
-
MD5
f13a4b05d7f039fb4a65f658ecf82fe3
-
SHA1
e03e2444c2ae573279d3068b2a4d3ceea9a00b91
-
SHA256
4db7e1ce798a7c32a191c6ef7a8b738b6e70e9c2fb5bd7038ecaa0e3ab40ecb0
-
SHA512
9c63d998ca24ee2bda6762c55985f9da53c7c56ea686bfe409e050459aaa46be724189075b7f69f96635c84761bdf757a4ed2f0e7c2d82df599adcdd0e865edb
-
SSDEEP
49152:UoP06lYkiRwUL+QEU7o/u8X3taLDtbc+wk3VYAc2hwIPscZH1n644B0kp:UoPskimonLg9aLDtork3VY5yscZVn3up
Malware Config
Signatures
Files
-
3a608eb3b749951029e85f41f675cc6371d38410611112478a4636237e809e95.zip
-
3a608eb3b749951029e85f41f675cc6371d38410611112478a4636237e809e95.exe windows x64
a440b909a947f928ec8f80b4dee9cee4
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
shell32
SHChangeNotifyRegister
mscoree
_CorExeMain
advapi32
RegCloseKey
user32
ValidateRect
kernel32
GetModuleHandleA
Sections
.rdata Size: - Virtual size: 865KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2.5MB - Virtual size: 2.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pexe Size: 93KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE