Static task
static1
Behavioral task
behavioral1
Sample
3d4bca06160a1916b52e9bbdc376faa138efb026f838583f62a4851675cb5d6b.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
3d4bca06160a1916b52e9bbdc376faa138efb026f838583f62a4851675cb5d6b.exe
Resource
win10v2004-20220414-en
General
-
Target
3d4bca06160a1916b52e9bbdc376faa138efb026f838583f62a4851675cb5d6b
-
Size
184KB
-
MD5
74dc37b7aabf745eac1d5fc65428488e
-
SHA1
fa406e4e4fe581091e30bac24ad0a1023bc5eed3
-
SHA256
3d4bca06160a1916b52e9bbdc376faa138efb026f838583f62a4851675cb5d6b
-
SHA512
660d9ed08afa90dc782d3814ab8428137d5748c63433b3fb3ddc76da9412a279d1da2fd87e1a11dbedd486edbdabd5db871d4912704e49b9ccb3ac3c39e4ac21
-
SSDEEP
3072:0oSXQhVakEBXaofykZSvyKtfVSKm0mpI7M5EL99GkD+HyslE7golbCvcWwH05Re:0oSX0VsBXaiyISxtNnUpG9R95D+HyPgm
Malware Config
Signatures
Files
-
3d4bca06160a1916b52e9bbdc376faa138efb026f838583f62a4851675cb5d6b.exe windows x86
e22870248797b80bad48bf9fa356f3aa
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_AGGRESIVE_WS_TRIM
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetConsoleMode
GetConsoleCP
HeapSize
SetStdHandle
InitializeCriticalSectionAndSpinCount
GetLocaleInfoA
FlushFileBuffers
GetStringTypeA
LCMapStringW
LCMapStringA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
GlobalAlloc
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
SetFilePointer
GetFileType
SetHandleCount
GetModuleFileNameA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CloseHandle
LockResource
LoadLibraryA
GetProcAddress
GetLastError
GlobalUnlock
lstrcatA
HeapCreate
ReadFile
GetStringTypeW
SizeofResource
GetCurrentThread
GlobalLock
GetCurrentProcess
HeapAlloc
LoadResource
lstrlenA
FindResourceA
GetFileSize
GetStdHandle
WriteFile
Sleep
HeapReAlloc
VirtualAlloc
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
VirtualFree
GetCurrentThreadId
SetLastError
TlsFree
CreateFileA
QueryPerformanceCounter
ExitProcess
TlsSetValue
TlsAlloc
TlsGetValue
GetModuleHandleW
IsValidCodePage
GetOEMCP
GetACP
InterlockedDecrement
InterlockedIncrement
GetCPInfo
MultiByteToWideChar
HeapFree
GetCommandLineA
GetStartupInfoA
RaiseException
RtlUnwind
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
user32
GetClientRect
CopyRect
SetScrollInfo
SetDlgItemTextA
MapWindowPoints
LoadImageA
GetSystemMetrics
SystemParametersInfoA
EndPaint
ClientToScreen
ScreenToClient
GetWindowRect
GetWindowDC
DrawIconEx
GetFocus
LoadBitmapA
InvalidateRgn
IsWindowEnabled
FillRect
SendMessageA
ShowCaret
BeginPaint
OffsetRect
InvalidateRect
DefWindowProcA
GetDesktopWindow
CreatePopupMenu
EnumDesktopsA
IsDlgButtonChecked
gdi32
BitBlt
GetTextExtentPoint32A
DeleteDC
ExcludeClipRect
DeleteObject
SelectObject
CreateCompatibleDC
CombineRgn
Rectangle
CreateRectRgn
GetObjectA
GetStockObject
CreateSolidBrush
comdlg32
GetFileTitleW
advapi32
EqualSid
OpenThreadToken
FreeSid
AllocateAndInitializeSid
OpenProcessToken
GetTokenInformation
GetUserNameW
shell32
SHGetFolderPathW
ole32
CreateStreamOnHGlobal
CoGetClassObject
oleaut32
OleSavePictureFile
OleLoadPicture
netapi32
NetApiBufferFree
NetUserGetInfo
comctl32
ImageList_AddMasked
ImageList_Create
uxtheme
DrawThemeBackground
urlmon
CoInternetGetSession
Sections
.text Size: 79KB - Virtual size: 78KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 35KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 60KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ