Static task
static1
Behavioral task
behavioral1
Sample
3a9397af4dfc720df6b8d7c2949bcac307fd5c2540ca114904f43c162e0f4a4b.exe
Resource
win7-20220310-en
General
-
Target
3a9397af4dfc720df6b8d7c2949bcac307fd5c2540ca114904f43c162e0f4a4b
-
Size
670KB
-
MD5
cebad7507c9b80980e1f6d9f829a7e41
-
SHA1
21a3b8876d3ed54da07825f9696bfb5597c47439
-
SHA256
3a9397af4dfc720df6b8d7c2949bcac307fd5c2540ca114904f43c162e0f4a4b
-
SHA512
5406f08f884584b88df81e3968b9dc37eb3cf4bccfb3d84dffedb7a421a8166f616d9c0b9d036067a06ac5ae59f3141974ee9759a8df18ebb29e2a618bea5bab
Malware Config
Signatures
Files
-
3a9397af4dfc720df6b8d7c2949bcac307fd5c2540ca114904f43c162e0f4a4b.exe windows x86
38f74a6869bc19f7a799d552f1ef9835
Code Sign
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTimeFormatW
GetTimeZoneInformation
GetLastError
VirtualAllocEx
GetLocalTime
CloseHandle
GetCurrentProcessId
WriteConsoleW
SetFilePointerEx
SetStdHandle
GetConsoleMode
GetConsoleCP
FlushFileBuffers
GetStringTypeW
HeapReAlloc
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
CreateEventA
CompareStringW
GetDateFormatW
LoadLibraryW
OutputDebugStringW
SetConsoleCtrlHandler
LoadLibraryExW
FreeLibrary
InterlockedExchange
GetOEMCP
GetACP
IsValidCodePage
FatalAppExitA
LeaveCriticalSection
EnterCriticalSection
Sleep
HeapSize
CreateSemaphoreW
GetModuleHandleW
TlsFree
TlsSetValue
ReadConsoleInputA
OpenProcess
GetProcessTimes
GetDateFormatA
GetTickCount
WaitForSingleObject
GetCurrentProcess
CompareFileTime
SystemTimeToTzSpecificLocalTime
SystemTimeToFileTime
GetCPInfo
GetLocaleInfoA
LCMapStringW
GetSystemDefaultLangID
TlsGetValue
TlsAlloc
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
WideCharToMultiByte
FreeEnvironmentStringsW
CreateFileW
GetEnvironmentStringsW
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetCommandLineA
EncodePointer
DecodePointer
RaiseException
RtlUnwind
IsDebuggerPresent
IsProcessorFeaturePresent
HeapFree
HeapAlloc
SetLastError
InterlockedIncrement
InterlockedDecrement
GetCurrentThread
GetCurrentThreadId
ExitProcess
GetModuleHandleExW
GetProcAddress
AreFileApisANSI
MultiByteToWideChar
GetStdHandle
WriteFile
GetModuleFileNameW
GetProcessHeap
GetFileType
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
GetStartupInfoW
GetModuleFileNameA
user32
UpdateWindow
GetCaretBlinkTime
CheckRadioButton
IsDlgButtonChecked
GetMenuItemInfoA
GetSystemMetrics
DestroyMenu
BeginPaint
ArrangeIconicWindows
ClientToScreen
GetWindowDC
FillRect
MsgWaitForMultipleObjects
GetLastActivePopup
IsHungAppWindow
GetWindowInfo
EnumWindowStationsA
SendMessageA
DrawEdge
GetCursorPos
PtInRect
GetQueueStatus
DrawFocusRect
GetForegroundWindow
SetWindowContextHelpId
GetWindowTextA
GetMenuItemRect
BringWindowToTop
GetAncestor
GetWindowLongA
EnableMenuItem
GetShellWindow
gdi32
DeleteDC
GetDeviceCaps
SetBkColor
SetMapMode
GetStockObject
AbortDoc
SetTextColor
comdlg32
PrintDlgW
advapi32
DuplicateToken
GetTokenInformation
GetLengthSid
oleaut32
VariantInit
dwmapi
ord102
pdh
PdhCloseLog
PdhOpenQueryW
PdhAddCounterW
PdhOpenLogW
PdhCloseQuery
PdhUpdateLogA
Sections
.text Size: 189KB - Virtual size: 188KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 437KB - Virtual size: 437KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ