Static task
static1
Behavioral task
behavioral1
Sample
3870a61232eb100439c9c414ca7837072f0c7c85249a9b8cc30ffd01fead8c40.exe
Resource
win7-20220901-en
General
-
Target
3870a61232eb100439c9c414ca7837072f0c7c85249a9b8cc30ffd01fead8c40
-
Size
200KB
-
MD5
614bbc23f7d6aca42aa43e77f01a4f64
-
SHA1
6a3010b1f2ea5b6ddb112c44c3a707c31a12140a
-
SHA256
3870a61232eb100439c9c414ca7837072f0c7c85249a9b8cc30ffd01fead8c40
-
SHA512
0301f54a37e661ba240e294394c0c3f25c69d85d35a3d0072b26a624e2df5fa151873932fa96cea1a6d837172a7e04d3eb4d85c4fda9994f4da33e100ffcd4f2
-
SSDEEP
3072:yvdraMJU7je5ZD751TAlidsZziwJJ05T5aY0TTvRwngX87Nzpo:yvRaMm7jQZ3PcliSZ5DTZwgXEzp
Malware Config
Signatures
Files
-
3870a61232eb100439c9c414ca7837072f0c7c85249a9b8cc30ffd01fead8c40.exe windows x86
84e591b9f53ef15d48f05ac333a172ca
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
FreeSid
rpcrt4
RpcServerRegisterIfEx
user32
SetCaretBlinkTime
SetWindowRgn
CallNextHookEx
SetWindowContextHelpId
SetCursor
psapi
GetModuleFileNameExW
oleaut32
VarI8FromR4
esent
JetEndSession
kernel32
GetCurrentProcess
LocalFlags
SetHandleInformation
LocalSize
GetProcessVersion
GetCommandLineA
GetStdHandle
GetExitCodeThread
GetCurrentThread
LocalReAlloc
DeleteVolumeMountPointW
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 56KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 842B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
aei Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
9B|PsbB+ Size: 84KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 644B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ