Static task
static1
Behavioral task
behavioral1
Sample
3e630958972b029da65d7bb4b1d4dff4fd419707d7af9494df5fbff5e032f3a8.exe
Resource
win7-20220414-en
General
-
Target
3e630958972b029da65d7bb4b1d4dff4fd419707d7af9494df5fbff5e032f3a8
-
Size
338KB
-
MD5
d1c52a453a936ea1c07e6e41eb922b69
-
SHA1
97cebbf9916c6f77a5ebdf5a60d29bfeb3df25b8
-
SHA256
3e630958972b029da65d7bb4b1d4dff4fd419707d7af9494df5fbff5e032f3a8
-
SHA512
d1ec60d8eca8961afb48c1837f0df4b37e28798480b6fb1c581e7749e5cca35a85211fe88b0d0b2d688ecc4e6726747f635f1b8da74f483bbae39b6bf8c0f284
-
SSDEEP
6144:KBH6A5dMkv9c5dgzyIKJ7hZWeG4HjApFiXDmT:i9dHqHNpJ7hZWfEqFsmT
Malware Config
Signatures
Files
-
3e630958972b029da65d7bb4b1d4dff4fd419707d7af9494df5fbff5e032f3a8.exe windows x86
08a4f6b43411457c1d9a62ec789dcf99
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetEnvironmentVariableA
GetSystemDirectoryA
GetCurrentDirectoryA
CreateFileA
MoveFileA
GetVolumeInformationA
QueryPerformanceCounter
GetVersionExA
GetDateFormatA
GetModuleHandleA
SetStdHandle
CloseHandle
SetFilePointerEx
GetConsoleMode
GetConsoleCP
FlushFileBuffers
GetStringTypeW
OutputDebugStringW
HeapReAlloc
GetCPInfo
GetSystemTime
SizeofResource
LoadResource
Sleep
CreateThread
OpenProcess
GetProcessHeap
HeapAlloc
VirtualProtectEx
LocalFree
WriteConsoleW
LocalAlloc
GetOEMCP
GetACP
IsValidCodePage
LoadLibraryExW
LCMapStringW
EncodePointer
DecodePointer
RaiseException
RtlUnwind
GetCommandLineA
IsProcessorFeaturePresent
GetLastError
HeapFree
ExitProcess
GetModuleHandleExW
GetProcAddress
MultiByteToWideChar
WideCharToMultiByte
HeapSize
IsDebuggerPresent
EnterCriticalSection
LeaveCriticalSection
SetLastError
GetCurrentThreadId
GetStdHandle
GetFileType
DeleteCriticalSection
GetStartupInfoW
GetModuleFileNameA
WriteFile
GetModuleFileNameW
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
CreateFileW
user32
GetKeyNameTextA
GetWindowTextLengthA
ClientToScreen
ScreenToClient
FrameRect
SystemParametersInfoA
SetDlgItemTextA
DrawEdge
RegisterClassExA
IsDlgButtonChecked
comctl32
ImageList_SetIconSize
ImageList_GetImageCount
ImageList_SetBkColor
ImageList_AddMasked
ImageList_Destroy
ImageList_Remove
comdlg32
GetSaveFileNameA
GetFileTitleA
GetOpenFileNameA
ReplaceTextA
ole32
OleSetContainedObject
OleInitialize
OleUninitialize
winmm
timeBeginPeriod
timeGetTime
uxtheme
DrawThemeText
CloseThemeData
OpenThemeData
xolehlp
ord7
Sections
.text Size: 208KB - Virtual size: 208KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 47KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 77KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ