Static task
static1
Behavioral task
behavioral1
Sample
3e91126c07fd4915dadaf8098a55cded4cc6aa1c627c54995d45f31dc4a6bfe0.exe
Resource
win7-20220414-en
General
-
Target
3e91126c07fd4915dadaf8098a55cded4cc6aa1c627c54995d45f31dc4a6bfe0
-
Size
309KB
-
MD5
dfc8ecd63c472144ecc06fab1d049ec1
-
SHA1
cc53b52e674a227f136152f1fd876bc87f5602f4
-
SHA256
3e91126c07fd4915dadaf8098a55cded4cc6aa1c627c54995d45f31dc4a6bfe0
-
SHA512
664d593b3f17d5f1aaa634625ecea20647991606e7b855a884df1c6c2d7a3e0ce5ddb2e9f4b9b0244197fd756ab29c32a8c8e044218e71fd2db29a6baf31843e
-
SSDEEP
3072:Rt39bPwU0CpSbFSYNvTjR8DhN4Fgi/FYtKZqNbraeKiTqnYi5I2SvY4PKEAgAoLW:/tbxSbrjshNY3FYqytKiBpA9J8CTGC
Malware Config
Signatures
Files
-
3e91126c07fd4915dadaf8098a55cded4cc6aa1c627c54995d45f31dc4a6bfe0.exe windows x86
4f7f6455009deeb2c1b71a13835f720d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
EnterCriticalSection
FindNextFileW
InitializeCriticalSection
GetEnvironmentVariableW
Sleep
TlsSetValue
GetCurrentDirectoryW
GetProcAddress
GetModuleHandleW
LoadLibraryExW
TlsAlloc
DecodePointer
HeapReAlloc
HeapSize
WriteConsoleW
FlushFileBuffers
GetProcessHeap
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
IsValidCodePage
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
EncodePointer
RaiseException
GetLastError
GetModuleFileNameW
SetLastError
RtlUnwind
InitializeCriticalSectionAndSpinCount
TlsGetValue
TlsFree
FreeLibrary
LeaveCriticalSection
DeleteCriticalSection
CreateFileW
GetFileType
CloseHandle
DuplicateHandle
GetStdHandle
WriteFile
GetModuleFileNameA
MultiByteToWideChar
WideCharToMultiByte
ExitProcess
GetModuleHandleExW
GetACP
HeapFree
HeapAlloc
GetStringTypeW
LCMapStringW
GetConsoleCP
GetConsoleMode
SetStdHandle
SetEndOfFile
ReadFile
ReadConsoleW
SetFilePointerEx
FindClose
FindFirstFileExA
FindNextFileA
FindFirstFileW
version
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW
ws2_32
WSAStartup
WSAWaitForMultipleEvents
WSAGetOverlappedResult
WSASocketW
WSACreateEvent
WSAAddressToStringW
WSACleanup
WSAConnect
netapi32
NetApiBufferFree
NetWkstaSetInfo
NetGetAnyDCName
advapi32
SystemFunction036
Sections
.text Size: 162KB - Virtual size: 161KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 46KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gfids Size: 512B - Virtual size: 292B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 96KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ