Static task
static1
Behavioral task
behavioral1
Sample
c3f193f4b5edbc7085aa15c97a4bb2e5eb65fa149198f981efbdb0df73a84e3f.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
c3f193f4b5edbc7085aa15c97a4bb2e5eb65fa149198f981efbdb0df73a84e3f.exe
Resource
win10v2004-20220414-en
General
-
Target
c3f193f4b5edbc7085aa15c97a4bb2e5eb65fa149198f981efbdb0df73a84e3f
-
Size
494KB
-
MD5
3ca3f57ff7605cd9e91f07f8ad0f1f15
-
SHA1
8cb6e34631bdc5b9e8a8c21ec82d10ef180a6549
-
SHA256
c3f193f4b5edbc7085aa15c97a4bb2e5eb65fa149198f981efbdb0df73a84e3f
-
SHA512
1c90e6ebbfbd89dc74c0248510caf72e3795a881a835f881ef2906fc7dd7223e79dac6dc900c4b98d93d9cb53681c2a8c360e6465dd4ac38c8bdabdbef7ddba0
-
SSDEEP
6144:a3D1nyQqnIEWMnaCdn5pOD4GMPd0sjXvlKv3ZTetHNzJd0n:usQqV4Cd5PGMKsjdU3kHFsn
Malware Config
Signatures
Files
-
c3f193f4b5edbc7085aa15c97a4bb2e5eb65fa149198f981efbdb0df73a84e3f.exe windows x86
35c1ae035f285d64c3fdd3a3368f4358
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapReAlloc
FindResourceExW
WriteTapemark
EndUpdateResourceW
SetConsoleTextAttribute
InterlockedDecrement
WaitNamedPipeA
GetCurrentProcess
SetEvent
GetConsoleTitleA
WriteFile
FindActCtxSectionStringA
Sleep
SetConsoleCP
GetFileAttributesW
VerifyVersionInfoA
lstrlenW
SetConsoleTitleA
GetLastError
GetProcAddress
LocalLock
HeapUnlock
LoadLibraryA
WaitForMultipleObjects
GetModuleFileNameA
GetModuleHandleA
DeleteCriticalSection
SetFileShortNameA
GetCurrentProcessId
GetPrivateProfileSectionW
CommConfigDialogW
CreateFileA
WriteConsoleW
WideCharToMultiByte
InterlockedIncrement
InterlockedExchange
MultiByteToWideChar
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
UnhandledExceptionFilter
SetUnhandledExceptionFilter
HeapFree
TerminateProcess
IsDebuggerPresent
GetModuleHandleW
ExitProcess
GetCommandLineA
GetStartupInfoA
GetCPInfo
RtlUnwind
RaiseException
LCMapStringW
LCMapStringA
GetStringTypeW
GetStdHandle
HeapAlloc
HeapCreate
VirtualFree
VirtualAlloc
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
CloseHandle
InitializeCriticalSectionAndSpinCount
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
GetStringTypeA
HeapSize
GetACP
GetOEMCP
IsValidCodePage
GetLocaleInfoA
SetStdHandle
GetConsoleCP
GetConsoleMode
FlushFileBuffers
SetFilePointer
WriteConsoleA
GetConsoleOutputCP
winhttp
WinHttpGetDefaultProxyConfiguration
WinHttpCloseHandle
WinHttpOpen
Sections
.text Size: 102KB - Virtual size: 101KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 334KB - Virtual size: 8.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.zar Size: 27KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.womuwaz Size: 1024B - Virtual size: 626B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pupam Size: 1024B - Virtual size: 963B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ