Static task
static1
Behavioral task
behavioral1
Sample
3d35ae33c9ff6733c65eb3fb6b5be1a2c50572cf05249c55b9d7ca04d00c5b00.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
3d35ae33c9ff6733c65eb3fb6b5be1a2c50572cf05249c55b9d7ca04d00c5b00.exe
Resource
win10v2004-20220414-en
General
-
Target
3d35ae33c9ff6733c65eb3fb6b5be1a2c50572cf05249c55b9d7ca04d00c5b00
-
Size
344KB
-
MD5
4c9d26671b002aed754533fde0a175d1
-
SHA1
9f6290c38ee05435fc61533a51c12df97634a7e7
-
SHA256
3d35ae33c9ff6733c65eb3fb6b5be1a2c50572cf05249c55b9d7ca04d00c5b00
-
SHA512
15ad4a1b2697683921bbeb7ffcacc74b9033535844d0df70d4c44dd2c9036d658f6376ef1bbed6b7f9ed94109a0fe30b390c7973793011c6c917b5d233bd153c
-
SSDEEP
6144:9ns1B3jhlt7zhA0H42+3t6TR/zFnU1r/K3p02BMgqL5fjT5GPo/:96zHtzh16ol/5kr/K3pHqL5LTI
Malware Config
Signatures
Files
-
3d35ae33c9ff6733c65eb3fb6b5be1a2c50572cf05249c55b9d7ca04d00c5b00.exe windows x86
90d2c677986893aa2df05310bbd392c4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
oleaut32
LPSAFEARRAY_UserSize
VARIANT_UserFree
version
VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoSizeW
VerInstallFileW
VerFindFileA
mpr
MultinetGetConnectionPerformanceA
WNetCancelConnection2A
WNetGetProviderNameA
WNetConnectionDialog1A
WNetAddConnection2A
WNetCancelConnectionA
msvcrt
_initterm
__getmainargs
_acmdln
rand
__setusermatherr
_dup
_onexit
__dllonexit
__dllonexit
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
towupper
putchar
_controlfp
user32
PtInRect
FindWindowExA
InsertMenuW
GetGUIThreadInfo
SetRectEmpty
SetForegroundWindow
GetDlgItemTextA
IsZoomed
GetScrollInfo
CallMsgFilterA
CheckMenuItem
DrawStateW
UnhookWinEvent
AttachThreadInput
PostMessageA
GetDlgItemTextW
SetMenu
UnpackDDElParam
FindWindowA
SetWindowPlacement
GetKeyboardLayoutNameW
ShowWindow
DestroyCursor
LoadBitmapA
CharLowerA
DrawTextW
IsCharAlphaNumericA
KillTimer
SetFocus
MapDialogRect
ClipCursor
GetKeyNameTextW
InsertMenuA
GetWindowTextLengthA
TranslateAcceleratorA
LoadCursorA
IsWindowEnabled
SetCaretBlinkTime
CharToOemA
GetDlgCtrlID
ShowCaret
SetWindowLongW
GetUserObjectInformationW
TrackPopupMenu
mouse_event
DrawFrameControl
EnumThreadWindows
WindowFromPoint
SendDlgItemMessageW
MapVirtualKeyExA
GetClipCursor
GetParent
GetDlgItemInt
DefDlgProcA
GetClipboardViewer
EnumDisplaySettingsW
BeginDeferWindowPos
VkKeyScanExW
GetMessagePos
ToAscii
CopyImage
LoadMenuA
GetCaretPos
IsWindowVisible
GetKeyboardState
DrawStateA
SetClassLongW
CopyIcon
CreateIconFromResourceEx
SendMessageA
DdeConnectList
CreateDialogIndirectParamA
GetMessageExtraInfo
RemovePropA
VkKeyScanExA
ChangeDisplaySettingsA
FrameRect
GetMenuItemCount
GetClipboardData
LoadCursorFromFileA
LoadStringW
ShowOwnedPopups
DrawIcon
RegisterClipboardFormatW
GetMenuState
CharUpperW
SystemParametersInfoA
UnionRect
GetLastActivePopup
GetWindowModuleFileNameA
ScreenToClient
DispatchMessageA
SetActiveWindow
AppendMenuW
DialogBoxIndirectParamW
GetDoubleClickTime
MessageBoxA
DispatchMessageW
SetCursor
LoadBitmapW
wvsprintfA
GetProcessWindowStation
GetFocus
MapVirtualKeyExW
CloseClipboard
RegisterClassExW
PostQuitMessage
GetDC
IsWindow
TrackPopupMenuEx
SetKeyboardState
CloseWindow
GetScrollRange
ShowCursor
SetClipboardData
TranslateAcceleratorW
DrawIconEx
CreateDialogIndirectParamW
DrawTextExA
PostMessageW
CheckRadioButton
DialogBoxIndirectParamA
PostThreadMessageW
ScrollWindowEx
EnableScrollBar
SetRect
SetCaretPos
IntersectRect
GetSystemMetrics
GetWindowWord
DeferWindowPos
GetClassInfoW
CharLowerBuffA
InvalidateRect
ValidateRect
CreateWindowStationW
ChildWindowFromPointEx
FindWindowExW
GetClipboardFormatNameW
SetPropA
MapVirtualKeyA
ModifyMenuA
DestroyAcceleratorTable
RegisterHotKey
CharNextA
GetClassLongA
DdeConnect
DdeAccessData
GetNextDlgTabItem
DestroyMenu
advapi32
ReportEventW
RegConnectRegistryA
CreateProcessAsUserW
RegEnumKeyW
OpenServiceA
RegQueryInfoKeyA
QueryServiceStatus
StartServiceCtrlDispatcherA
SetNamedSecurityInfoA
RegisterServiceCtrlHandlerW
GetUserNameW
RegCloseKey
RegOverridePredefKey
RegQueryValueA
GetUserNameA
CloseServiceHandle
LsaQueryInformationPolicy
LogonUserA
RegCreateKeyExA
GetServiceDisplayNameW
RegSetValueA
LsaOpenPolicy
EnumServicesStatusA
RegNotifyChangeKeyValue
InitiateSystemShutdownA
ChangeServiceConfigA
LockServiceDatabase
RegCreateKeyW
SetServiceObjectSecurity
QueryServiceLockStatusW
ChangeServiceConfig2A
DecryptFileW
EnumDependentServicesA
GetServiceKeyNameA
SetServiceStatus
CreateProcessAsUserA
RegCreateKeyExW
mfc42
ord2985
ord3262
ord1062
ord4465
ord3259
ord1081
ord2982
ord1016
ord5714
ord1082
ord5307
ord4698
ord1049
ord3831
ord5302
ord1009
ord3346
ord2396
ord1088
ord1089
ord3922
ord5731
ord1037
ord2554
ord4486
ord6375
ord815
ord2976
ord1051
ord2725
ord3830
ord3825
ord3079
ord4080
ord1055
ord4424
ord3738
ord561
ord1576
ord3081
ord1168
Sections
.text Size: 180KB - Virtual size: 179KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 60KB - Virtual size: 58KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 44KB - Virtual size: 588KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 56KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ