Static task
static1
Behavioral task
behavioral1
Sample
3bd9e5265d09e77894effb7e5c3c67e60701dcd5f7dad4b4f0d13198e6fd6f5f.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
3bd9e5265d09e77894effb7e5c3c67e60701dcd5f7dad4b4f0d13198e6fd6f5f.exe
Resource
win10v2004-20220414-en
General
-
Target
3bd9e5265d09e77894effb7e5c3c67e60701dcd5f7dad4b4f0d13198e6fd6f5f
-
Size
352KB
-
MD5
66472e1306d9be948e3de935649ea5e6
-
SHA1
e96168a585a63f052ff86d1c6002b8d3ca0d5a3e
-
SHA256
3bd9e5265d09e77894effb7e5c3c67e60701dcd5f7dad4b4f0d13198e6fd6f5f
-
SHA512
f895b6af4c0b2f1ebc6639704fe44759be8053579012cbe2c0b67127c3c4f000cdcc8c8c3d6125135ea683674cebf2d81f5f0acd4b0219c1dc7346ad86362c66
-
SSDEEP
6144:l87mvUe+5ZApYUlfwatyikEIiBG2tNPlj7vvV/smO87OO7XSHqEtGLGv9ohFLG1b:C7mMeC7Uh7k6BLXdPFvOOTShGPhtG19H
Malware Config
Signatures
Files
-
3bd9e5265d09e77894effb7e5c3c67e60701dcd5f7dad4b4f0d13198e6fd6f5f.exe windows x86
845dcefacb7a68431f6b2507d389b82e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStringTypeA
GetHandleInformation
FindFirstChangeNotificationW
GetStartupInfoA
GetModuleHandleA
gdi32
Rectangle
CreateBitmap
EnumFontFamiliesExW
PlayEnhMetaFile
CreateDIBPatternBrushPt
ExtEscape
CreateDCW
PtVisible
ExtCreateRegion
SetDIBColorTable
RestoreDC
GetClipRgn
GetDIBColorTable
SetPixelFormat
GetTextExtentPoint32W
StartPage
CreateFontW
DPtoLP
SetBkColor
CreateRectRgn
SetViewportOrgEx
GetTextMetricsA
GetKerningPairsA
SetWindowExtEx
CreatePenIndirect
Pie
GetRgnBox
DeleteDC
SaveDC
BitBlt
CreateSolidBrush
CreateDIBSection
ScaleWindowExtEx
UnrealizeObject
CreateFontA
PlayEnhMetaFileRecord
GetDeviceCaps
GetMapMode
LPtoDP
SelectClipRgn
Polyline
GetGlyphOutlineA
CloseEnhMetaFile
GetBrushOrgEx
EnumMetaFile
GdiFlush
EndDoc
GetEnhMetaFilePaletteEntries
FillPath
CancelDC
SetStretchBltMode
CreateEllipticRgn
GetGlyphOutlineW
GetObjectType
SetBitmapBits
EnumFontFamiliesA
CreateDCA
OffsetWindowOrgEx
GetSystemPaletteEntries
ResizePalette
ExtCreatePen
MoveToEx
CopyEnhMetaFileW
CreateICA
advapi32
RegQueryInfoKeyW
ImpersonateSelf
CreateProcessAsUserA
CreateServiceA
BuildExplicitAccessWithNameA
GetSecurityDescriptorDacl
SetSecurityDescriptorGroup
GetUserNameW
ReportEventW
GetSidSubAuthority
GetFileSecurityW
RevertToSelf
OpenServiceA
RegRestoreKeyW
LsaQueryInformationPolicy
QueryServiceStatus
CreateProcessAsUserW
RegQueryInfoKeyA
ChangeServiceConfigA
DeleteService
AdjustTokenPrivileges
OpenSCManagerW
ChangeServiceConfigW
GetKernelObjectSecurity
RegCreateKeyExW
ChangeServiceConfig2W
RegConnectRegistryA
GetSidSubAuthorityCount
LsaFreeMemory
RegCreateKeyExA
ReportEventA
RegOpenKeyExA
RegQueryValueA
QueryServiceConfigW
AddAce
SetEntriesInAclW
GetAce
RegOverridePredefKey
RegisterServiceCtrlHandlerA
StartServiceCtrlDispatcherA
RegSetValueExA
LookupPrivilegeValueW
InitiateSystemShutdownA
RegSetValueExW
GetLengthSid
GetAclInformation
InitializeSecurityDescriptor
LsaOpenPolicy
RegEnumKeyExA
user32
SendMessageA
GetMenuState
DialogBoxIndirectParamW
SetForegroundWindow
DdeQueryStringA
wvsprintfA
GetWindowModuleFileNameA
InsertMenuA
mouse_event
CopyImage
LockWindowUpdate
CharUpperBuffW
DestroyCursor
EnableWindow
SendDlgItemMessageW
SetCaretBlinkTime
msvcrt
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_heapused
atol
_onexit
__dllonexit
fwprintf
memchr
Sections
.text Size: 60KB - Virtual size: 58KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 64KB - Virtual size: 61KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 548KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 207KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ