Static task
static1
Behavioral task
behavioral1
Sample
3a6c4a466f072c8fb1b98dad22a2d66b9433261f515fafb21427755b5bd1d666.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
3a6c4a466f072c8fb1b98dad22a2d66b9433261f515fafb21427755b5bd1d666.exe
Resource
win10v2004-20220414-en
General
-
Target
3a6c4a466f072c8fb1b98dad22a2d66b9433261f515fafb21427755b5bd1d666
-
Size
388KB
-
MD5
44e4017f47dce2d2925124bb2116166c
-
SHA1
f5efde405de07ca60afe67ee6f5e53538195fd23
-
SHA256
3a6c4a466f072c8fb1b98dad22a2d66b9433261f515fafb21427755b5bd1d666
-
SHA512
be68a64aee0a1d5241012d5cde84432274d08217628ab65e131e842e29c33b382ff5c3b4d390cf4a493b4304ae6ba06f1547e02eb22099b27a85135553cf2a75
-
SSDEEP
6144:I3mWFbFjg6ctShH9aSn+DSXnCLKkT+rXgBF8wWGisaYOFsRah:IzVRctSx9n+bLM8DoGxOFQa
Malware Config
Signatures
Files
-
3a6c4a466f072c8fb1b98dad22a2d66b9433261f515fafb21427755b5bd1d666.exe windows x86
1c3a3e8766224e751bc257659fa4c29d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindNextFileW
FindFirstFileW
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
EnumDateFormatsA
EnterCriticalSection
DeleteFileW
HeapAlloc
DeleteCriticalSection
CreateWaitableTimerW
CreateFileW
CreateFileMappingA
CreateFileA
CreateDirectoryW
CloseHandle
BackupWrite
GetProcAddress
FlushFileBuffers
GetCurrentProcessId
GetDriveTypeW
GetModuleHandleA
GetFileAttributesW
GlobalAlloc
GetStartupInfoA
GetCommandLineW
LoadLibraryA
GetModuleHandleW
GetFileAttributesA
GetDriveTypeA
LoadLibraryW
GetCommandLineA
GetTickCount
GetProcessHeap
GetLastError
GetVersion
lstrlenW
FlushInstructionCache
FormatMessageW
lstrcmpiA
WritePrivateProfileStringW
WritePrivateProfileSectionW
WriteFile
WideCharToMultiByte
WaitNamedPipeW
VirtualQuery
VirtualProtectEx
VirtualFree
VirtualAlloc
UpdateResourceA
UnmapViewOfFile
UnhandledExceptionFilter
TryEnterCriticalSection
TlsSetValue
TlsGetValue
TlsFree
TlsAlloc
TerminateProcess
SuspendThread
Sleep
SetVolumeLabelW
SetUnhandledExceptionFilter
SetProcessShutdownParameters
SetLastError
SetCurrentDirectoryW
RemoveDirectoryW
ReadFile
ReadConsoleA
RaiseException
QueryPerformanceFrequency
QueryPerformanceCounter
OutputDebugStringA
OpenThread
OpenProcess
MultiByteToWideChar
MoveFileExW
Module32NextW
MapViewOfFileEx
MapViewOfFile
MapUserPhysicalPages
LocalFree
LocalAlloc
LeaveCriticalSection
LCMapStringW
IsSystemResumeAutomatic
IsDebuggerPresent
IsBadReadPtr
InterlockedExchange
InterlockedCompareExchange
InitializeCriticalSectionAndSpinCount
InitializeCriticalSection
GetVolumeInformationW
GetVersionExA
GetTempPathW
GetSystemTimeAsFileTime
GetSystemTime
GetSystemInfo
GetSystemDefaultLCID
GetPrivateProfileStringW
GetModuleFileNameW
GetLongPathNameA
GetLogicalDrives
GetFileAttributesExW
GetExitCodeThread
GetDiskFreeSpaceW
GetCurrentThread
GetCurrentProcess
GetCurrentDirectoryA
GetConsoleScreenBufferInfo
GetComputerNameExW
GetACP
lstrlenA
GetCurrentThreadId
FreeLibrary
user32
WINNLSEnableIME
UnpackDDElParam
SetWindowRgn
SendDlgItemMessageA
RegisterWindowMessageW
RegisterShellHookWindow
MessageBoxW
InvalidateRgn
InsertMenuA
InflateRect
IMPQueryIMEA
GetKeyboardLayout
GetGuiResources
GetDlgItemInt
ExcludeUpdateRgn
CloseDesktop
IsDlgButtonChecked
SetWindowLongW
UpdateWindow
ShowWindow
IsWindowVisible
LoadIconA
GetMenu
EnableMenuItem
LoadBitmapA
GetDlgItem
GetDC
LoadBitmapW
DestroyWindow
SendMessageA
GetSysColor
DestroyIcon
GetParent
LoadIconW
IsWindow
GetSystemMetrics
SendMessageW
GetKeyState
IsRectEmpty
gdi32
StretchDIBits
SetWorldTransform
SetWinMetaFileBits
SetViewportExtEx
SetSystemPaletteUse
SelectBrushLocal
RemoveFontResourceTracking
QueryFontAssocStatus
GetTextMetricsW
GetTextExtentPoint32A
GetSystemPaletteUse
GetStretchBltMode
GetFontData
GetCurrentObject
GetClipRgn
GetCharWidthA
GetBrushOrgEx
GdiSetPixelFormat
GdiQueryFonts
GdiPlayScript
GdiPlayPageEMF
GdiEntry9
GdiEntry6
GdiConvertEnhMetaFile
FloodFill
EngPaint
EngDeletePalette
EngCreateDeviceSurface
CreateScalableFontResourceW
CreatePalette
CopyEnhMetaFileW
ArcTo
AngleArc
GetEnhMetaFileW
EndPage
GetBkMode
GetEnhMetaFileA
DeleteObject
EndDoc
CreateMetaFileW
BeginPath
EndPath
CreateMetaFileA
FillPath
AddFontResourceA
GetFontLanguageInfo
CreateHalftonePalette
GetColorSpace
SaveDC
CloseEnhMetaFile
CreateCompatibleDC
GdiGetBatchLimit
GetGraphicsMode
SelectObject
CloseFigure
GetBkColor
AbortDoc
CreateSolidBrush
SetBkMode
DeleteColorSpace
CreatePatternBrush
AddFontResourceW
CloseMetaFile
AbortPath
DeleteMetaFile
FlattenPath
SetTextColor
GdiFlush
DeleteEnhMetaFile
GetDCPenColor
GetLayout
CancelDC
GetDCBrushColor
SetTextAlign
DeleteDC
advapi32
OpenSCManagerW
RegQueryValueExW
OpenServiceW
OpenThreadToken
RegCloseKey
RegCreateKeyExA
RegCreateKeyExW
RegFlushKey
RegOpenKeyExA
RegOpenKeyExW
AddAccessAllowedAce
RegOpenKeyW
RegQueryValueExA
RegSetValueExA
RegisterServiceCtrlHandlerW
ReportEventW
RevertToSelf
SetEntriesInAclW
SetSecurityDescriptorControl
SetSecurityDescriptorDacl
SetSecurityDescriptorOwner
SetServiceStatus
StartServiceCtrlDispatcherW
AllocateAndInitializeSid
CloseServiceHandle
ControlService
EqualSid
FreeSid
GetExplicitEntriesFromAclW
GetFileSecurityW
GetLengthSid
GetNamedSecurityInfoW
GetSecurityDescriptorControl
GetTokenInformation
GetUserNameW
ImpersonateSelf
InitializeAcl
InitializeSecurityDescriptor
MapGenericMask
OpenProcessToken
AccessCheck
shell32
SHBrowseForFolderA
Shell_NotifyIconW
Shell_NotifyIconA
ShellExecuteEx
ShellExecuteA
SHGetPathFromIDListA
SHGetIconOverlayIndexW
SHFormatDrive
SHFileOperation
SHGetDataFromIDListA
SHBindToParent
ExtractAssociatedIconExA
DoEnvironmentSubstW
ole32
CoSetProxyBlanket
CoQueryProxyBlanket
CoInitialize
CoCreateInstance
CoTaskMemFree
CoUninitialize
shlwapi
StrRStrIA
StrRChrW
StrRChrA
StrCmpNIW
winmm
timeGetTime
Sections
.text Size: 297KB - Virtual size: 296KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 72KB - Virtual size: 71KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ