Static task
static1
Behavioral task
behavioral1
Sample
3db746eed02d35fc583a37ba21e267f3b655473df46e7589903d23c91d429325.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
3db746eed02d35fc583a37ba21e267f3b655473df46e7589903d23c91d429325.exe
Resource
win10v2004-20230220-en
General
-
Target
3db746eed02d35fc583a37ba21e267f3b655473df46e7589903d23c91d429325
-
Size
812KB
-
MD5
ac2cfd384640d5f33bd4952c879030c1
-
SHA1
76f65c952ab041e0370c5875e639f827e36a996c
-
SHA256
3db746eed02d35fc583a37ba21e267f3b655473df46e7589903d23c91d429325
-
SHA512
1d3490e18492007a8f9c3f67dad9686a56d0da5c234a360ee928e4730d209075aa0dd587dda2e186a661a818549ff416430cf70f6854d50650b1ed3d4be44c8c
-
SSDEEP
24576:Q2z5Fv8cpX6NQRM9IntuH1qtwSop8LcxLT7:9z5FRpXBttuHqwruUL3
Malware Config
Signatures
Files
-
3db746eed02d35fc583a37ba21e267f3b655473df46e7589903d23c91d429325.exe windows x86
fce62e1e9ae045c4ba2d21d86f08b57c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
oleaut32
SysFreeString
advapi32
RegQueryValueExW
user32
LoadStringW
msimg32
AlphaBlend
gdi32
UnrealizeObject
version
VerQueryValueW
mpr
WNetOpenEnumW
shfolder
SHGetFolderPathW
ole32
OleUninitialize
comctl32
InitializeFlatSB
shell32
ShellExecuteExW
wsock32
WSACleanup
msvcrt
_gcvt
ntdll
NtQuerySystemTime
netapi32
Netbios
winmm
timeSetEvent
iphlpapi
GetAdaptersInfo
netpackets
nf_setTCPTimeout
netpkfilters
pfc_writeHeader
ws2_32
WSAStringToAddressA
Sections
.text Size: 692KB - Virtual size: 3.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 112KB - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE