Static task
static1
Behavioral task
behavioral1
Sample
3d8021d27c5a8dd5167a0cac971435ad0d45a67beb0a10bf8c36c5651e4e6c51.exe
Resource
win7-20220414-en
General
-
Target
3d8021d27c5a8dd5167a0cac971435ad0d45a67beb0a10bf8c36c5651e4e6c51
-
Size
351KB
-
MD5
4528cbe4ef4996ca407e6a72a8630f9a
-
SHA1
2497063eede8652ffefa8da2906654664381b42d
-
SHA256
3d8021d27c5a8dd5167a0cac971435ad0d45a67beb0a10bf8c36c5651e4e6c51
-
SHA512
c91ae39d3fc47568e0cd969778002181f061e8823f99eecff991c515de0fb294c99d6510208326b398700bb79c9b2597725875c5d4d7309b0e43544de7662ac5
-
SSDEEP
6144:3qhamZpNJzEp0iIuNQQ6bX4d3zGD1Wil7rfQfA:3qLvN6huQx9ol7qA
Malware Config
Signatures
Files
-
3d8021d27c5a8dd5167a0cac971435ad0d45a67beb0a10bf8c36c5651e4e6c51.exe windows x86
8d306da5ac4d2f6c5ca3d2a9c530546a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTempFileNameW
CopyFileW
LocalFree
VirtualProtectEx
GetSystemInfo
Sleep
CreateEventW
GetFileAttributesW
LocalAlloc
WaitForMultipleObjects
GetEnvironmentVariableW
MoveFileW
GetShortPathNameW
CreateFileW
HeapSize
ReadConsoleW
WriteConsoleW
SetStdHandle
FindNextFileW
FindFirstFileExW
FindClose
WideCharToMultiByte
CloseHandle
WaitForSingleObjectEx
GetCurrentProcess
GetCurrentThread
GetCurrentThreadId
QueryPerformanceCounter
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
EncodePointer
DecodePointer
MultiByteToWideChar
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
GetModuleHandleW
GetProcAddress
LCMapStringW
GetLocaleInfoW
GetStringTypeW
GetCPInfo
SetEvent
ResetEvent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
GetCurrentProcessId
InitializeSListHead
GetLastError
GetThreadTimes
FreeLibrary
GetModuleFileNameW
LoadLibraryExW
RaiseException
RtlUnwind
HeapAlloc
GetModuleHandleExW
HeapReAlloc
HeapFree
ExitProcess
GetStdHandle
WriteFile
GetACP
GetFileType
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
FlushFileBuffers
GetConsoleCP
GetConsoleMode
ReadFile
SetFilePointerEx
GetProcessHeap
IsValidCodePage
GetOEMCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetCommandLineA
GetCommandLineW
comctl32
ImageList_EndDrag
ImageList_GetImageCount
ImageList_Create
ImageList_DragEnter
ImageList_GetIcon
comdlg32
GetSaveFileNameW
FindTextW
GetOpenFileNameW
ole32
CoUninitialize
OleCreate
CoInitialize
OleInitialize
oleaut32
OleLoadPicture
OleCreateFontIndirect
OleCreatePropertyFrame
OleCreatePictureIndirect
OleCreatePropertyFrameIndirect
OleTranslateColor
advapi32
SystemFunction036
Sections
.text Size: 251KB - Virtual size: 251KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 81KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 681KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gfids Size: 1024B - Virtual size: 960B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 512B - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ