Static task
static1
Behavioral task
behavioral1
Sample
3d44aa7a97608eb72bb53fc9c679e21381867f6e5a2a3.exe
Resource
win7-en-20211208
General
-
Target
3d44aa7a97608eb72bb53fc9c679e21381867f6e5a2a3.exe
-
Size
344KB
-
MD5
0c8e60e686bed8b0debc760b085f89a7
-
SHA1
60eae9962d92223a448f978004972f4be2f10588
-
SHA256
3d44aa7a97608eb72bb53fc9c679e21381867f6e5a2a370689dc516c2418a58e
-
SHA512
e0be1a48c2715c820306ca43443f010ab65589525e35755e42df8291dfad083cb2f6f8204f44c4248269221212eaf8f73fdf1c44f24be217d40e42a0b62648f3
-
SSDEEP
6144:O+WBPfOV5NM505R5uVJMvCgH5BYi+96HVVEw2Z2nloe:OFa565GDuVSvCgAiy0IW
Malware Config
Signatures
Files
-
3d44aa7a97608eb72bb53fc9c679e21381867f6e5a2a3.exe.exe windows x86
39faf729f370bc5b0eaea34fff27cff9
Code Sign
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
WriteProfileSectionW
GetNumaProcessorNode
FindFirstVolumeW
SetConsoleCursorInfo
HeapLock
FindFirstChangeNotificationA
WaitForSingleObject
GetNamedPipeHandleStateA
FileTimeToDosDateTime
CallNamedPipeW
EnumResourceTypesW
EnumResourceNamesW
ExitProcess
GetExitCodeProcess
ActivateActCtx
GetVersionExA
VerifyVersionInfoW
GetConsoleOutputCP
ResetEvent
FindNextFileA
GetCompressedFileSizeW
CopyFileExW
ReadConsoleOutputCharacterA
GetDefaultCommConfigW
VerLanguageNameW
_hread
SetCommConfig
WritePrivateProfileStructA
FreeEnvironmentStringsW
CreateTimerQueueTimer
FindVolumeClose
LeaveCriticalSection
WriteConsoleInputA
TlsSetValue
SetComputerNameExW
FindAtomA
BuildCommDCBAndTimeoutsA
LocalAlloc
VerifyVersionInfoA
TlsGetValue
GetCommandLineW
InterlockedExchange
CopyFileW
AddRefActCtx
OutputDebugStringW
FormatMessageW
GetPriorityClass
WritePrivateProfileStringW
GetUserDefaultLangID
TerminateThread
GlobalUnfix
HeapValidate
GetStartupInfoA
CreatePipe
GetCPInfoExA
GetSystemWindowsDirectoryA
WriteProfileSectionA
GetCalendarInfoA
DebugBreak
GetConsoleCursorInfo
SetLastError
DeleteVolumeMountPointA
DebugActiveProcessStop
lstrcmpA
GetPrivateProfileSectionNamesA
GetSystemWindowsDirectoryW
CreateActCtxW
SetMailslotInfo
GetPrivateProfileIntW
_lread
OutputDebugStringA
InterlockedDecrement
DefineDosDeviceW
SetVolumeMountPointW
SetThreadIdealProcessor
SetConsoleActiveScreenBuffer
GetProcessAffinityMask
GlobalAddAtomW
SetConsoleWindowInfo
EndUpdateResourceA
ContinueDebugEvent
MoveFileW
ReadConsoleA
WriteConsoleA
VirtualProtect
BuildCommDCBA
InterlockedFlushSList
WritePrivateProfileSectionW
DeleteCriticalSection
GetFileAttributesExW
FileTimeToLocalFileTime
GetVolumePathNameW
GetConsoleMode
HeapWalk
GetComputerNameW
FindActCtxSectionStringA
ReadProcessMemory
MoveFileExA
GetProcAddress
GlobalFix
GlobalDeleteAtom
FatalExit
InterlockedExchangeAdd
WaitNamedPipeA
SetSystemTime
GetLocalTime
FreeEnvironmentStringsA
OpenSemaphoreA
GetPrivateProfileStructA
EnumCalendarInfoExA
GetMailslotInfo
lstrcpyA
LockFile
EndUpdateResourceW
GetConsoleCP
GetConsoleAliasW
GetLargestConsoleWindowSize
FindAtomW
GetConsoleAliasExesLengthA
WriteConsoleInputW
CreateMailslotW
EnumDateFormatsW
SetCommState
_lopen
GetConsoleAliasExesLengthW
ResetWriteWatch
GetPrivateProfileStringW
ClearCommError
CreateIoCompletionPort
LoadLibraryW
ChangeTimerQueueTimer
GetFileInformationByHandle
GetLastError
SetFirmwareEnvironmentVariableW
MoveFileA
GetConsoleDisplayMode
GetSystemDefaultLangID
LocalLock
GetCommMask
SetMessageWaitingIndicator
AreFileApisANSI
OpenWaitableTimerA
GetProcessShutdownParameters
PeekNamedPipe
FillConsoleOutputCharacterW
FindNextVolumeMountPointW
WriteProfileStringW
DeleteAtom
AddAtomW
WriteConsoleOutputCharacterA
AssignProcessToJobObject
QueryDosDeviceW
EnterCriticalSection
GetConsoleAliasExesW
GetBinaryTypeA
DeleteFileA
RaiseException
GetCommandLineA
IsBadReadPtr
GetModuleFileNameW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
CloseHandle
GetModuleHandleW
Sleep
InterlockedIncrement
TlsAlloc
GetCurrentThreadId
TlsFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
GetEnvironmentStrings
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
HeapFree
VirtualFree
WriteFile
HeapAlloc
HeapSize
HeapReAlloc
VirtualAlloc
GetACP
GetOEMCP
GetCPInfo
IsValidCodePage
RtlUnwind
InitializeCriticalSectionAndSpinCount
WriteConsoleW
SetStdHandle
FlushFileBuffers
MultiByteToWideChar
SetFilePointer
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
ReadFile
CreateFileA
user32
OemToCharW
Sections
.text Size: 167KB - Virtual size: 167KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 66KB - Virtual size: 4.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 85KB - Virtual size: 85KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ