Static task
static1
Behavioral task
behavioral1
Sample
3c817a1f009b9f53f8ca09635e6078e6ccd303ded19a7707f50c56b98772597f.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
3c817a1f009b9f53f8ca09635e6078e6ccd303ded19a7707f50c56b98772597f.exe
Resource
win10v2004-20220414-en
General
-
Target
3c817a1f009b9f53f8ca09635e6078e6ccd303ded19a7707f50c56b98772597f
-
Size
314KB
-
MD5
1056d505887e53dc872cafaeb71be3d1
-
SHA1
cb8271eaf5413ddad0fc981491962a62f598d48f
-
SHA256
3c817a1f009b9f53f8ca09635e6078e6ccd303ded19a7707f50c56b98772597f
-
SHA512
751e23241ae283aad1f37e70e5a6a146171e04182378040350bc52b5d4afee4315f9123c078809a91eba2daf0fb41ba3842cc9c15f68c25fe69fb95047972117
-
SSDEEP
6144:rYmRAwCvZWJDQKTARjABxuPZvFSZVdWeLVgfksUQft+YJ:rSwUZDMyB8Xh0Ua1J
Malware Config
Signatures
Files
-
3c817a1f009b9f53f8ca09635e6078e6ccd303ded19a7707f50c56b98772597f.exe windows x86
a236ddef9ee7321bd8bf76cef0a83a90
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetWindowDC
ScrollDC
GetWindow
OpenIcon
GetGuiResources
GetProcessWindowStation
GetTopWindow
GetWindowThreadProcessId
SendMessageA
PostMessageW
SendMessageW
GetDlgItem
SetWindowTextW
EndDialog
PostQuitMessage
DialogBoxParamW
GetWindowLongW
CharUpperW
CreateWindowExW
TranslateMessage
SetWindowLongW
PeekMessageW
MsgWaitForMultipleObjects
MessageBoxW
GetSystemMetrics
ExitWindowsEx
DispatchMessageW
DestroyWindow
CharUpperBuffW
CallWindowProcW
GetKeyboardType
LoadStringW
MessageBoxA
CharNextW
SetTimer
DialogBoxParamA
ShowWindow
GetScrollRange
DeleteMenu
FindWindowA
CharToOemBuffW
GetMessageA
SetFocus
IsWindowUnicode
SetWindowPos
IsHungAppWindow
AnyPopup
EmptyClipboard
shell32
CommandLineToArgvW
gdi32
GetTextCharsetInfo
PlayMetaFile
PatBlt
GetObjectW
GetLogColorSpaceA
Pie
RoundRect
ScaleViewportExtEx
GetWindowExtEx
GetBkColor
SelectClipPath
SaveDC
TranslateCharsetInfo
CombineTransform
GetEnhMetaFileDescriptionW
GetCharWidthFloatW
SetBitmapDimensionEx
GetDIBits
GetCharWidth32A
GetFontData
SetViewportOrgEx
dbghelp
UnDecorateSymbolName
crypt32
CryptMsgGetParam
CertFreeCertificateContext
version
GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW
netapi32
NetConnectionEnum
kernel32
CreateThread
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
CompareStringW
LocalFree
QueryDosDeviceW
GetLogicalDriveStringsW
GetDriveTypeW
DeviceIoControl
MoveFileExW
GetSystemDirectoryW
CreateEventA
WriteConsoleA
WaitForMultipleObjects
FileTimeToSystemTime
FileTimeToLocalFileTime
FileTimeToDosDateTime
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
DuplicateHandle
SetFilePointerEx
GlobalFree
GlobalAlloc
GetCommandLineA
InitializeCriticalSection
SetFileAttributesW
FreeEnvironmentStringsA
GetEnvironmentStrings
InterlockedIncrement
InterlockedDecrement
CompareStringA
LoadLibraryA
LCMapStringA
GetStringTypeA
GetLocaleInfoA
SetEnvironmentVariableW
GetStartupInfoW
SetUnhandledExceptionFilter
GetConsoleOutputCP
ExitThread
VirtualFree
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
ConvertThreadToFiber
GetFileInformationByHandle
RtlCaptureStackBackTrace
SetLastError
DeleteAtom
ConvertFiberToThread
SetFileValidData
SetEnvironmentVariableA
GetWindowsDirectoryW
CreateProcessA
CreateEventW
EnumResourceNamesW
HeapSetInformation
GetDiskFreeSpaceExW
FindResourceExW
ReleaseSemaphore
CloseHandle
GetStdHandle
RaiseException
RtlUnwind
UnhandledExceptionFilter
WriteFile
ExitProcess
FindClose
FindFirstFileW
FreeLibrary
GetCommandLineW
GetLocaleInfoW
GetModuleFileNameW
GetModuleHandleW
GetProcAddress
GetStartupInfoA
GetThreadLocale
LoadLibraryExW
lstrcpynW
lstrlenW
MultiByteToWideChar
WideCharToMultiByte
VirtualQuery
GetCurrentThreadId
GetVersion
QueryPerformanceCounter
GetTickCount
GetSystemInfo
VirtualAlloc
Sleep
GetACP
LocalAlloc
TlsGetValue
TlsSetValue
CreateDirectoryW
CreateFileW
CreateProcessW
DeleteFileW
EnumCalendarInfoW
FindResourceW
FormatMessageW
GetCPInfo
GetCurrentProcess
GetDiskFreeSpaceW
GetEnvironmentVariableW
GetExitCodeProcess
GetFileAttributesW
GetFileSize
GetFullPathNameW
GetLastError
GetUserDefaultLangID
GetVersionExW
LoadLibraryW
LoadResource
LockResource
ReadFile
RemoveDirectoryW
ResetEvent
SetEndOfFile
SetErrorMode
SetEvent
SetFilePointer
SignalObjectAndWait
SizeofResource
VirtualProtect
WaitForSingleObject
GetProcessHeap
ExpandEnvironmentStringsW
SetCurrentDirectoryW
GetCurrentDirectoryW
FindNextFileW
SystemTimeToTzSpecificLocalTime
GetTimeZoneInformation
GetSystemTime
lstrlenA
GetComputerNameW
GetLocalTime
CreateFileA
FlushFileBuffers
WriteConsoleW
SetStdHandle
IsProcessorFeaturePresent
HeapReAlloc
HeapSize
GetStringTypeW
GetConsoleMode
GetConsoleCP
LCMapStringW
HeapAlloc
IsValidCodePage
GetOEMCP
HeapFree
IsDebuggerPresent
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
HeapCreate
TlsFree
TlsAlloc
Sections
.UJYHTGF Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.loikuty Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.ikutyhg Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 67KB - Virtual size: 67KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 339KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 207KB - Virtual size: 207KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ