Static task
static1
Behavioral task
behavioral1
Sample
3d8c63ca62f7c9c3c5a1acf65fb36b5261ce6c74dd0d9f7156e143bc3d606a6f.exe
Resource
win10-en-20211208
General
-
Target
3d8c63ca62f7c9c3c5a1acf65fb36b5261ce6c74dd0d9f7156e143bc3d606a6f
-
Size
369KB
-
MD5
74c427100a030bda215b94baffe6f65e
-
SHA1
f2684ccb2fcd8949a5c78796f5a5b77193c6bac9
-
SHA256
3d8c63ca62f7c9c3c5a1acf65fb36b5261ce6c74dd0d9f7156e143bc3d606a6f
-
SHA512
5c4be5b7cff2a0384e70ef3dae32d1a334858afc8b2cf52d560a4b09cc53f5aa0fec0b4559af05508a6700b084d906c3eb16ade038b8cb50852e448d393d8b16
-
SSDEEP
6144:oZoTBL64g7h9cL31wg3PaSjjgA/n8IYFL:oZotG4g7HaSuPHnC
Malware Config
Signatures
Files
-
3d8c63ca62f7c9c3c5a1acf65fb36b5261ce6c74dd0d9f7156e143bc3d606a6f.exe windows x86
18a0118a3e3019b0948ec696c6fc63cf
Code Sign
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetComputerNameA
GetDateFormatW
GetNativeSystemInfo
SetLocaleInfoA
FindActCtxSectionGuid
InterlockedDecrement
SetMailslotInfo
SetEvent
SleepEx
GetCurrentThread
GetConsoleAliasesLengthA
GetConsoleTitleA
GlobalAlloc
SwitchToFiber
GetStringTypeExW
DnsHostnameToComputerNameW
GetAtomNameW
LCMapStringA
GetStdHandle
GetProcAddress
VirtualAlloc
SetFileAttributesA
UnhandledExceptionFilter
LocalAlloc
GetModuleFileNameA
GetModuleHandleA
GetFileTime
PeekConsoleInputA
ReadConsoleInputW
GetConsoleProcessList
GetProfileSectionW
lstrcpyW
SetUnhandledExceptionFilter
GetStartupInfoW
EnterCriticalSection
LeaveCriticalSection
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
TerminateProcess
GetCurrentProcess
IsDebuggerPresent
HeapAlloc
RtlUnwind
GetModuleHandleW
Sleep
ExitProcess
GetLastError
WriteFile
SetFilePointer
HeapFree
CloseHandle
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
InitializeCriticalSectionAndSpinCount
HeapReAlloc
CreateFileA
ReadFile
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LoadLibraryA
SetStdHandle
FlushFileBuffers
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
MultiByteToWideChar
SetEndOfFile
GetProcessHeap
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
HeapSize
winhttp
WinHttpSetDefaultProxyConfiguration
Sections
.text Size: 46KB - Virtual size: 46KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 236KB - Virtual size: 235KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 33KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ