Static task
static1
Behavioral task
behavioral1
Sample
3390fbd4d3a5a31a5bb05fa416ad002d2c7ca6c063520be5a46091f70aa56f7b.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
3390fbd4d3a5a31a5bb05fa416ad002d2c7ca6c063520be5a46091f70aa56f7b.exe
Resource
win10v2004-20230220-en
General
-
Target
3390fbd4d3a5a31a5bb05fa416ad002d2c7ca6c063520be5a46091f70aa56f7b
-
Size
3.5MB
-
MD5
feb827f7cec9726f09326b4f4d893732
-
SHA1
ebabe2fee1fdf3d9e3d1a34ae9d807363d0ea92b
-
SHA256
3390fbd4d3a5a31a5bb05fa416ad002d2c7ca6c063520be5a46091f70aa56f7b
-
SHA512
efe747b74e50a66e49d2d2b5f80f0450ea3118e20b77188709e341e08641c62d5495fa8adbc2ad015b965ffdf2ad86467f2236793e2d1f5044f7af7f0e79a911
-
SSDEEP
49152:Ek1MjSOKRODn+0Y9rHsrd/Y2hztN7GjR9UIPnnpYcGZKatqqkcHInBRC0UH:Ek2Zaqg2FtN7GjfPnkKatq9BnBo/H
Malware Config
Signatures
Files
-
3390fbd4d3a5a31a5bb05fa416ad002d2c7ca6c063520be5a46091f70aa56f7b.exe windows x86
e483260e3ce7f7c1d63eb1e0be25654d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mfc100u
ord12610
msvcr100
_CxxThrowException
kernel32
InterlockedExchange
user32
LoadIconW
gdi32
ExtTextOutW
shell32
ShellExecuteW
comctl32
InitCommonControlsEx
shlwapi
PathFileExistsW
ole32
CreateStreamOnHGlobal
gdiplus
GdipDrawString
msvcp100
?_Xlength_error@std@@YAXPBD@Z
version
GetFileVersionInfoA
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
advapi32
RegDeleteKeyA
winspool.drv
ClosePrinter
oleaut32
VariantClear
ws2_32
WSASetLastError
wldap32
ord217
Sections
.text Size: 628KB - Virtual size: 728KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 2.8MB - Virtual size: 2.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 148KB - Virtual size: 152KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ