Static task
static1
Behavioral task
behavioral1
Sample
3c69888d30e8ae0accc124781166200ff4183046dd6351791dbf6e74695785e3.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
3c69888d30e8ae0accc124781166200ff4183046dd6351791dbf6e74695785e3.exe
Resource
win10v2004-20230220-en
General
-
Target
3c69888d30e8ae0accc124781166200ff4183046dd6351791dbf6e74695785e3
-
Size
204KB
-
MD5
e7dfe38b869451329c7b27e853621eb9
-
SHA1
5eba2ab78ba58bd22532517cda9302fe8ce12dde
-
SHA256
3c69888d30e8ae0accc124781166200ff4183046dd6351791dbf6e74695785e3
-
SHA512
8761eaef22cc4bcccbc897cb3384eb49e303e13ce27376630bf627afbfb1b54b970c8fc393b2a9c37266dcfa749d4dc71f41a0d00c588359ad51fedd714ffa20
-
SSDEEP
3072:oX4BUID0Gp3szLtvU49Ljq/fHVsJypXMOg8+tYZIF5+q:ooBUI1pI5AfeIMOgEZIF5p
Malware Config
Signatures
Files
-
3c69888d30e8ae0accc124781166200ff4183046dd6351791dbf6e74695785e3.exe windows x86
a0a8746e0bab76de10e43affb82ee3b2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
lstrlenA
MultiByteToWideChar
RtlMoveMemory
WriteProcessMemory
VirtualAlloc
GetProcAddress
FreeLibrary
VirtualProtect
lstrcpynA
GetProcessHeap
GetModuleHandleA
ExitProcess
HeapAlloc
HeapReAlloc
HeapFree
IsBadReadPtr
GetModuleFileNameA
LCMapStringA
GetStartupInfoA
GetCommandLineA
GetVersion
RtlUnwind
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
DeleteCriticalSection
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
GetLastError
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
WriteFile
IsBadWritePtr
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
RaiseException
GetCPInfo
GetACP
GetOEMCP
SetFilePointer
InterlockedDecrement
InterlockedIncrement
GetStringTypeA
GetStringTypeW
SetUnhandledExceptionFilter
IsBadCodePtr
LCMapStringW
SetStdHandle
FlushFileBuffers
CloseHandle
user32
MessageBoxA
wsprintfA
Sections
.text Size: 56KB - Virtual size: 54KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 136KB - Virtual size: 189KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 664B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ