_gifgeek@8
Static task
static1
Behavioral task
behavioral1
Sample
3cf9abbaa740a8978100fb6a2a15fda7bd06a44b7dcde44c93068be72c9a0c43.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
3cf9abbaa740a8978100fb6a2a15fda7bd06a44b7dcde44c93068be72c9a0c43.exe
Resource
win10v2004-20220414-en
General
-
Target
3cf9abbaa740a8978100fb6a2a15fda7bd06a44b7dcde44c93068be72c9a0c43
-
Size
3.8MB
-
MD5
3220237e0b04e7aa65b106855898b5d8
-
SHA1
fac56baf9d932d019a0ffdf3fad20b5b6d08f82c
-
SHA256
3cf9abbaa740a8978100fb6a2a15fda7bd06a44b7dcde44c93068be72c9a0c43
-
SHA512
76211a45622356158b982a2dc72db7bbee478dce002b5f89bfd23daa56071de1167b23f4cd42ec02194240446d8d6205e69c21a505ada2ad8c9fe6879aa4608b
-
SSDEEP
98304:FPl3vKzteaP6kHL4dqIJ3fWrsnbbSGsmqSPD1tTQUR:FPl/2zHL4xhOrsHSGsmHrjvR
Malware Config
Signatures
Files
-
3cf9abbaa740a8978100fb6a2a15fda7bd06a44b7dcde44c93068be72c9a0c43.exe windows x86
b138a0e0a1923dd191bc5bf1f3193f94
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
EnumResourceNamesW
SearchPathW
SetFilePointer
SetLocalTime
BuildCommDCBAndTimeoutsA
CallNamedPipeA
LoadResource
SetUnhandledExceptionFilter
InterlockedIncrement
CompareFileTime
SetDefaultCommConfigW
SetEnvironmentVariableW
SetTapeParameters
IsBadReadPtr
SetCommState
GetPriorityClass
GlobalAlloc
Sleep
CopyFileW
GetPrivateProfileStructW
SetSystemTimeAdjustment
GetFileAttributesA
FileTimeToDosDateTime
GetACP
lstrlenW
DisconnectNamedPipe
FreeLibraryAndExitThread
GetCurrentDirectoryW
SetLastError
GetProcAddress
SetStdHandle
SetFileApisToOEM
LoadLibraryA
WaitForMultipleObjects
_lread
GetModuleHandleA
lstrcatW
FreeEnvironmentStringsW
FindAtomW
GetProfileSectionW
lstrcpyA
CreateSemaphoreA
ExitProcess
GetLastError
DeleteFileA
GetStartupInfoW
HeapValidate
RaiseException
GetModuleHandleW
InterlockedDecrement
TlsGetValue
TlsAlloc
TlsSetValue
GetCurrentThreadId
TlsFree
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetModuleFileNameW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
HeapFree
VirtualFree
GetModuleFileNameA
WriteFile
HeapAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
HeapSize
HeapReAlloc
VirtualAlloc
GetOEMCP
GetCPInfo
IsValidCodePage
InitializeCriticalSectionAndSpinCount
RtlUnwind
DebugBreak
OutputDebugStringA
WriteConsoleW
OutputDebugStringW
LoadLibraryW
WideCharToMultiByte
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
GetConsoleCP
GetConsoleMode
WriteConsoleA
GetConsoleOutputCP
CreateFileA
CloseHandle
FlushFileBuffers
winhttp
WinHttpCloseHandle
Exports
Exports
Sections
.text Size: 127KB - Virtual size: 126KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3.7MB - Virtual size: 3.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 43.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ