Static task
static1
Behavioral task
behavioral1
Sample
3bf66140ed49d2b71c6674e064b26d605f196ec45b99cc2392802313918cd4ed.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
3bf66140ed49d2b71c6674e064b26d605f196ec45b99cc2392802313918cd4ed.exe
Resource
win10v2004-20220414-en
General
-
Target
3bf66140ed49d2b71c6674e064b26d605f196ec45b99cc2392802313918cd4ed
-
Size
104KB
-
MD5
cfce7e045cb6ed8bdcab5460ea2ff37a
-
SHA1
6bdc0c47643df5da4a583b0e23a8572a90d27ecd
-
SHA256
3bf66140ed49d2b71c6674e064b26d605f196ec45b99cc2392802313918cd4ed
-
SHA512
41d25210921915a7163daa4433a61f8c865a64829fa1d1ffd50a2dea7aa8aef66d3e7ed52229bac9e181c20b21543a3cb92251edcdce738e1735010bdba01279
-
SSDEEP
1536:qzLT4AQ+ivU0dhAFlpamL2MSDmFuzeRc+fjl5iiolQ9y8X7YeKnX+HGn+C:DXnhwlpH2DcRcc5iiolQpw+C
Malware Config
Signatures
Files
-
3bf66140ed49d2b71c6674e064b26d605f196ec45b99cc2392802313918cd4ed.exe windows x86
4e3dd45b3d9cbdc912d34c36e396c06f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
dbnmpntw
ConnectionError
ConnectionWrite
ConnectionRead
ConnectionClose
ConnectionVer
advapi32
RegUnLoadKeyA
ReadEventLogA
RegRestoreKeyA
RegOpenKeyW
OpenServiceW
GetUserNameW
RegLoadKeyW
RegEnumKeyW
CryptSignHashW
RegCreateKeyExW
kernel32
CreateMutexA
VirtualFreeEx
VirtualAllocEx
GetModuleHandleA
FindVolumeClose
TlsSetValue
AddAtomA
LoadLibraryExW
GetSystemTime
GetCurrentProcessId
SetCurrentDirectoryW
LoadLibraryExA
ReadFile
InterlockedIncrement
GetShortPathNameA
CopyFileA
FindFirstFileA
OpenSemaphoreW
CreateSemaphoreA
FindAtomA
OpenFileMappingW
Sections
.code Size: 22KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.pdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_MEM_READ
.ydata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rel Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ