Static task
static1
Behavioral task
behavioral1
Sample
3f444cc8ccb0bebbb6539b98d64e8fed19e2f7e6f950d18d63e9e8716012ccb7.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
3f444cc8ccb0bebbb6539b98d64e8fed19e2f7e6f950d18d63e9e8716012ccb7.exe
Resource
win10v2004-20220414-en
General
-
Target
3f444cc8ccb0bebbb6539b98d64e8fed19e2f7e6f950d18d63e9e8716012ccb7
-
Size
551KB
-
MD5
3eb6593e42fb0f63c30f5215994074b1
-
SHA1
208c3a6c75b7b6b2f4a3ee93396b76cb9251896f
-
SHA256
3f444cc8ccb0bebbb6539b98d64e8fed19e2f7e6f950d18d63e9e8716012ccb7
-
SHA512
e853bace4a7532c4fe12c4ec6e9f45d668e9376c3b3ecbec739bc3db458f68697d7812771caad35f1f6e2b70eae0ddf10815e2bbc5ab4d7ed307a2db6d7f530d
-
SSDEEP
12288:4ouAjifAQsiludNSmjkcRVE3K9eTm/l8U99akLU:dZjP6GNS4cXTvULLU
Malware Config
Signatures
Files
-
3f444cc8ccb0bebbb6539b98d64e8fed19e2f7e6f950d18d63e9e8716012ccb7.exe windows x86
8b86b20ae2ec625a9eded7dcf9f30fd5
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
SetConsoleCursorPosition
GetStdHandle
SetConsoleMode
ReadConsoleInputA
SetEnvironmentVariableA
CompareStringW
CreateFileW
HeapSize
GetStringTypeW
IsProcessorFeaturePresent
WriteConsoleW
HeapReAlloc
HeapAlloc
SetStdHandle
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
HeapCreate
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameA
GetModuleFileNameW
LoadLibraryW
CloseHandle
GetTimeZoneInformation
LCMapStringW
GetCurrentThreadId
SetLastError
GetLastError
MoveFileA
EnterCriticalSection
LeaveCriticalSection
DeleteFileA
GetSystemTimeAsFileTime
GetProcAddress
GetModuleHandleW
ExitProcess
DecodePointer
GetCommandLineA
HeapSetInformation
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
TerminateProcess
GetCurrentProcess
SetFilePointer
RtlUnwind
HeapFree
WriteFile
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
FlushFileBuffers
MultiByteToWideChar
ReadFile
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
resutils
ResUtilStopResourceService
ResUtilGetResourceDependency
urlmon
URLDownloadW
RegisterFormatEnumerator
CopyBindInfo
winspool.drv
DeleteMonitorA
ord213
EnumPrinterDataW
user32
DdeQueryConvInfo
DragObject
GetMessageTime
GetSystemMetrics
WINNLSGetIMEHotkey
SetSystemCursor
mswsock
TransmitFile
GetAddressByNameW
s_perror
GetAcceptExSockaddrs
MigrateWinsockConfiguration
dn_expand
rresvport
rtutils
TraceVprintfExW
TraceDeregisterExA
TraceRegisterExA
RouterLogEventDataW
TraceGetConsoleW
msi
ord92
ord130
ord34
ord16
Sections
.text Size: 78KB - Virtual size: 77KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 14KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ