Static task
static1
Behavioral task
behavioral1
Sample
3d6b4312947a3a0f76abd8981c5452dfd26aadaa109d3e200d987f8e903d5ab0.exe
Resource
win7-20220414-en
General
-
Target
3d6b4312947a3a0f76abd8981c5452dfd26aadaa109d3e200d987f8e903d5ab0
-
Size
208KB
-
MD5
b28e0a994aec0fed8a429852f5f96b69
-
SHA1
ae83fb72418e9ab22722b9ece02f93860b4ffc6c
-
SHA256
3d6b4312947a3a0f76abd8981c5452dfd26aadaa109d3e200d987f8e903d5ab0
-
SHA512
a9031899f7cea9153e9fa3442bfbfd001cd157347828ebcc0dace421f4571464bffac582522b3aecc0297925ec01d6ee4f208cf679ae5987a584ac583db9ac2f
-
SSDEEP
3072:DtUPpLY+c7SbgeD6gvxz+EWVAJ0mFoO6SS13P8M4yk1pE1c2i0iB:EW+c2kUPvFoOW30FpEjPiB
Malware Config
Signatures
Files
-
3d6b4312947a3a0f76abd8981c5452dfd26aadaa109d3e200d987f8e903d5ab0.exe windows x86
97772eff7a93de7be37e88071f5f5556
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FileTimeToSystemTime
GetFileSizeEx
GetLastError
GetProcAddress
LoadLibraryA
LocalAlloc
SetProcessWorkingSetSize
GetProcessShutdownParameters
SetProcessShutdownParameters
GetCurrentProcessId
GetTempPathA
TerminateProcess
CloseHandle
CreateFileW
FlushFileBuffers
WriteConsoleW
SetStdHandle
OutputDebugStringW
SetFilePointerEx
GetConsoleMode
GetConsoleCP
LoadLibraryExW
GetCurrentProcess
GetProcessIoCounters
GetCPInfo
GlobalMemoryStatus
GetFileSize
lstrcpyA
SetProcessAffinityMask
GetOEMCP
IsValidCodePage
GetACP
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetSystemTimeAsFileTime
EncodePointer
DecodePointer
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
WideCharToMultiByte
MultiByteToWideChar
GetStringTypeW
IsProcessorFeaturePresent
HeapFree
HeapReAlloc
GetCommandLineW
RaiseException
RtlUnwind
HeapAlloc
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
InitializeCriticalSectionAndSpinCount
Sleep
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetModuleHandleW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
ExitProcess
GetModuleHandleExW
IsDebuggerPresent
GetStdHandle
GetFileType
GetProcessHeap
HeapSize
GetCurrentThreadId
GetModuleFileNameW
WriteFile
QueryPerformanceCounter
user32
GetPropW
DestroyIcon
GetScrollRange
SetPropW
EndPaint
LoadImageW
PostMessageW
CopyImage
BeginPaint
winhttp
WinHttpWriteData
WinHttpConnect
WinHttpCloseHandle
WinHttpOpen
WinHttpQueryOption
Sections
.text Size: 88KB - Virtual size: 87KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 74KB - Virtual size: 364KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ