Static task
static1
Behavioral task
behavioral1
Sample
3929729e7b0f42902887cc1739b6dc23a2ae916e476e6ed32177d26a52f82d34.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
3929729e7b0f42902887cc1739b6dc23a2ae916e476e6ed32177d26a52f82d34.exe
Resource
win10v2004-20220414-en
General
-
Target
3929729e7b0f42902887cc1739b6dc23a2ae916e476e6ed32177d26a52f82d34
-
Size
200KB
-
MD5
fd80e80c66e845241f572f13aaf0d9d0
-
SHA1
2af2cc6c7840e7a32e9460d8463a6d8a9c22c59a
-
SHA256
3929729e7b0f42902887cc1739b6dc23a2ae916e476e6ed32177d26a52f82d34
-
SHA512
424119a5989754e12cda7e4d66f0971afc28cd5f0dfcb1c125b2ff283b05c31617ec9b0fdaea815f7331c5dee7623b16d56028a90fac5d40c49f5e173d20c26d
-
SSDEEP
3072:4fJbP7KneoXB4xuI7/ssfKSWfs4yMzv7SinMoAXbNpcd4n:4f1P7cut/s+KSESAS+ixuG
Malware Config
Signatures
Files
-
3929729e7b0f42902887cc1739b6dc23a2ae916e476e6ed32177d26a52f82d34.exe windows x86
f8be865180e97183f98620dc1623cca4
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WaitNamedPipeA
GetCurrentActCtx
GetEnvironmentStringsW
SetHandleInformation
GetWindowsDirectoryA
FindActCtxSectionStringA
SetConsoleCP
GetFileAttributesA
lstrcpynW
IsProcessorFeaturePresent
VerifyVersionInfoA
WriteConsoleW
ReadFile
GetACP
GetProcAddress
GetProcessHeaps
VerLanguageNameA
BuildCommDCBAndTimeoutsW
LockResource
GetCommMask
WaitForMultipleObjects
GetModuleFileNameA
GetModuleHandleA
GetPrivateProfileSectionA
RequestDeviceWakeup
GetStringTypeW
GetConsoleTitleW
DeleteCriticalSection
SetFileShortNameA
QueryDepthSList
DeleteFileW
GlobalReAlloc
WriteProcessMemory
LCMapStringW
lstrcpyA
WriteTapemark
lstrlenA
DeleteTimerQueueEx
CreateMutexW
SetDefaultCommConfigA
ReadFileEx
GetLastError
HeapReAlloc
GetCommandLineA
HeapSetInformation
GetStartupInfoW
RaiseException
DecodePointer
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
TerminateProcess
GetCurrentProcess
HeapAlloc
HeapFree
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
RtlUnwind
HeapCreate
GetModuleHandleW
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
FreeEnvironmentStringsW
WideCharToMultiByte
SetHandleCount
GetFileType
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
SetFilePointer
GetConsoleCP
GetConsoleMode
GetCPInfo
GetOEMCP
IsValidCodePage
Sleep
CloseHandle
CreateFileA
HeapSize
LoadLibraryW
SetStdHandle
MultiByteToWideChar
FlushFileBuffers
SetEndOfFile
GetProcessHeap
CreateFileW
user32
GetCaretPos
advapi32
BackupEventLogA
CloseEventLog
RegQueryInfoKeyA
AdjustTokenGroups
RegQueryValueExW
MapGenericMask
Sections
.text Size: 46KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 86KB - Virtual size: 85KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 74.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 33KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ