Static task
static1
Behavioral task
behavioral1
Sample
3fab5c87e2e1d9407282d93a7ddc44b0a2d8837288185e44261916aa041ba5ba.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
3fab5c87e2e1d9407282d93a7ddc44b0a2d8837288185e44261916aa041ba5ba.exe
Resource
win10v2004-20220414-en
General
-
Target
3fab5c87e2e1d9407282d93a7ddc44b0a2d8837288185e44261916aa041ba5ba
-
Size
388KB
-
MD5
6af5f63dc76875ea5e2a8767afd25717
-
SHA1
146125b422998328585ee1118947aa62892123ef
-
SHA256
3fab5c87e2e1d9407282d93a7ddc44b0a2d8837288185e44261916aa041ba5ba
-
SHA512
3167f703a7fdf8a5581ec0a50fb85428b578dffd916e330581f63399175d6656b453a2242bdf377e8909d1d84ede2153c9cd464bf0578046018a8fd3ab888f10
-
SSDEEP
6144:VMj70BQJgzQccPE0YBe4ai4wWLniDEGKitCpE1O5XKjqp7wpXs/qTC0ML/w:ajYqM30YXz4ZiIGVIpE4hK+Cs/q+DTw
Malware Config
Signatures
Files
-
3fab5c87e2e1d9407282d93a7ddc44b0a2d8837288185e44261916aa041ba5ba.exe windows x86
31642fdecc3ca3157612592ed2679153
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
SendNotifyMessageA
SendMessageA
msvcrt
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
malloc
rand
_onexit
__dllonexit
_fcloseall
_wutime
advapi32
GetSidSubAuthority
GetSecurityDescriptorDacl
CreateProcessAsUserA
SetSecurityDescriptorGroup
SetThreadToken
FreeSid
ImpersonateSelf
GetTokenInformation
StartServiceA
LsaQueryInformationPolicy
GetAce
RegDeleteKeyA
RegRestoreKeyW
SetKernelObjectSecurity
GetFileSecurityW
LsaOpenPolicy
RegUnLoadKeyW
CopySid
GetSidIdentifierAuthority
RegCreateKeyExW
GetEffectiveRightsFromAclW
RegSetValueA
RegQueryInfoKeyA
AdjustTokenPrivileges
QueryServiceConfigW
ChangeServiceConfigA
RegisterServiceCtrlHandlerA
QueryServiceLockStatusW
OpenThreadToken
GetSidLengthRequired
mpr
WNetGetProviderNameA
gdi32
SetViewportOrgEx
BitBlt
GetBitmapBits
FillRgn
SetStretchBltMode
SetTextAlign
EndPage
GetCharABCWidthsW
CreateCompatibleDC
GetCharWidthA
PolyPolyline
SetWindowExtEx
SetDIBColorTable
GetTextExtentPoint32W
SetPolyFillMode
OffsetClipRgn
SaveDC
GetEnhMetaFileBits
UnrealizeObject
GetSystemPaletteEntries
StartPage
SetWinMetaFileBits
CreateFontIndirectA
GetTextColor
Rectangle
CreateEllipticRgn
ScaleViewportExtEx
GetObjectType
ExtTextOutA
GetEnhMetaFileHeader
GetGlyphOutlineA
GetClipRgn
SetPixel
CreateFontA
ScaleWindowExtEx
EnumFontsW
Pie
SetBitmapBits
CreateFontIndirectW
OffsetViewportOrgEx
GetClipBox
GetTextExtentPoint32A
StartDocW
EnumFontFamiliesA
SetPixelFormat
EndPath
GetMapMode
GetWindowOrgEx
Ellipse
EnumMetaFile
GetDeviceCaps
DeleteDC
OffsetWindowOrgEx
SetROP2
GetPixel
Arc
CreateDIBSection
SetTextCharacterExtra
GetRgnBox
GetBrushOrgEx
CreateDCA
EndDoc
GetKerningPairsA
CreateDIBPatternBrushPt
CreateRoundRectRgn
ExtCreatePen
CreatePenIndirect
FillPath
CreateICA
GetObjectW
RectVisible
ExtFloodFill
DeleteEnhMetaFile
ExtEscape
GdiFlush
GetTextMetricsA
SetBkMode
RealizePalette
CreateFontW
GetWinMetaFileBits
MoveToEx
GetObjectA
PlayEnhMetaFileRecord
CopyEnhMetaFileW
SetRectRgn
CreateICW
RemoveFontResourceA
CreateCompatibleBitmap
GetTextCharsetInfo
RestoreDC
SetTextColor
UpdateColors
CopyEnhMetaFileA
GetStockObject
GetFontData
kernel32
GetModuleHandleA
GetStringTypeA
CompareFileTime
CreateFileMappingA
DeleteFileA
GetStartupInfoA
Sections
.text Size: 96KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 60KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 547KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 212KB - Virtual size: 209KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ