Static task
static1
Behavioral task
behavioral1
Sample
3e3234dc11a38dc2b0e672e3c7be803425559f8b3e12230d04504c85ab451276.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
3e3234dc11a38dc2b0e672e3c7be803425559f8b3e12230d04504c85ab451276.exe
Resource
win10v2004-20220414-en
General
-
Target
3e3234dc11a38dc2b0e672e3c7be803425559f8b3e12230d04504c85ab451276
-
Size
678KB
-
MD5
33de2966b7e8e129b1363a8268ea30b6
-
SHA1
ec91dbfc11be8fd95c34f58cf52873f137f733e9
-
SHA256
3e3234dc11a38dc2b0e672e3c7be803425559f8b3e12230d04504c85ab451276
-
SHA512
efb01999dabaf30e2eaa48653722af548f4b58299c9cf12c84c6d9787d6bcea18fbfdf4b68d4e0e64530c4c0357bb4e3030ba5dbf732ea835bbad99472576c35
-
SSDEEP
12288:TGCvd4YfdiwaYepoOlPLkofGtc/RvDMfWembRh:MhpoOmx0hMfWemb
Malware Config
Signatures
Files
-
3e3234dc11a38dc2b0e672e3c7be803425559f8b3e12230d04504c85ab451276.exe windows x86
02389885f9523d8c60f418daac3f7c6a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
SHGetPathFromIDListA
kernel32
LoadLibraryA
CompareStringA
InterlockedExchange
GetModuleHandleA
SetLastError
FreeLibrary
FlushFileBuffers
HeapReAlloc
HeapSize
GetConsoleMode
ReadFile
SetConsoleCtrlHandler
SetTapePosition
SetFilePointerEx
GetConsoleCP
TlsAlloc
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
GetCurrentProcess
TerminateProcess
RaiseException
InterlockedPushEntrySList
InterlockedFlushSList
RtlUnwind
GetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
DecodePointer
TlsGetValue
TlsSetValue
TlsFree
EncodePointer
GetACP
GetFullPathNameA
GetStdHandle
WriteFile
GetModuleFileNameA
ExitProcess
GetModuleHandleExW
HeapAlloc
HeapFree
GetOEMCP
IsValidLocale
GetUserDefaultLCID
GetCurrentThread
GetFileType
OutputDebugStringA
CloseHandle
WaitForSingleObjectEx
CreateThread
FindClose
FindFirstFileExA
FindFirstFileExW
FindNextFileA
GetCommandLineA
GetCommandLineW
SetEnvironmentVariableA
SetStdHandle
GetProcessHeap
user32
InvalidateRect
GetKeyboardType
MsgWaitForMultipleObjects
winspool.drv
GetPrinterDataExA
advapi32
EncryptFileA
CreatePrivateObjectSecurity
GetSecurityDescriptorSacl
Sections
.text Size: 252KB - Virtual size: 251KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 28KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 346KB - Virtual size: 345KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ