Static task
static1
Behavioral task
behavioral1
Sample
3ad271f0c2f68dcc879452a96348a3fca0d8686472543c81e870f7ab366f3d39.exe
Resource
win7-20220414-en
General
-
Target
3ad271f0c2f68dcc879452a96348a3fca0d8686472543c81e870f7ab366f3d39
-
Size
273KB
-
MD5
a818adf566140e69834a6d91d7e85cd8
-
SHA1
022b36c5f2e9b98f46ee1bd6c39a06e817a16d50
-
SHA256
3ad271f0c2f68dcc879452a96348a3fca0d8686472543c81e870f7ab366f3d39
-
SHA512
6a189a79597433c722afe607cee064e60287c6b2c470e88c9a54932a9f12a3f7c57be0a9d3e69834df34368785ce3df131afedc8d8cd40fdd5a4024945c6df55
-
SSDEEP
6144:+sLtDlMmWO8k4I581TS9s0VC3u5ZyeTwqFPyx1SVM:vhDlX0GjFC3qzqiVM
Malware Config
Signatures
Files
-
3ad271f0c2f68dcc879452a96348a3fca0d8686472543c81e870f7ab366f3d39.exe windows x86
ad9af1df67e6dc4f0eb14ab3e132beca
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
OpenSemaphoreA
LoadLibraryA
LoadLibraryW
GetModuleFileNameA
GetFirmwareEnvironmentVariableA
FindResourceExA
EndUpdateResourceA
WritePrivateProfileSectionW
GetPrivateProfileSectionNamesW
GetCurrentDirectoryW
CreateDirectoryExA
DefineDosDeviceA
GetFileAttributesExA
DeleteFileW
FindFirstFileExA
CopyFileW
lstrlenA
BuildCommDCBAndTimeoutsW
CommConfigDialogA
GetDefaultCommConfigA
OpenJobObjectW
SetInformationJobObject
AddRefActCtx
GetCalendarInfoA
SetCalendarInfoA
EnumDateFormatsW
GetSystemDefaultLCID
PeekConsoleInputA
AllocConsole
WriteConsoleW
SetFilePointerEx
HeapSize
lstrcmpA
GetMailslotInfo
PeekNamedPipe
GetSystemTimes
GetFileTime
DeviceIoControl
LockFile
FreeEnvironmentStringsW
TerminateProcess
GetProcessTimes
HeapUnlock
HeapAlloc
VirtualQuery
VirtualProtect
LocalAlloc
GlobalWire
GlobalUnlock
IsBadStringPtrW
GlobalAlloc
IsProcessorFeaturePresent
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
GetModuleHandleW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
GetCurrentProcess
RaiseException
RtlUnwind
GetLastError
SetLastError
EncodePointer
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
ExitProcess
GetModuleHandleExW
MultiByteToWideChar
WideCharToMultiByte
GetStdHandle
WriteFile
GetACP
HeapFree
HeapReAlloc
LCMapStringW
GetFileType
FindClose
FindNextFileA
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
GetProcessHeap
CloseHandle
SetStdHandle
GetStringTypeW
FlushFileBuffers
GetConsoleCP
GetConsoleMode
DecodePointer
CreateFileW
user32
GetInputState
GetMonitorInfoW
advapi32
RegQueryValueExW
RegQueryValueA
RegOpenKeyExA
RegCreateKeyA
RegCloseKey
GetFileSecurityW
GetPrivateObjectSecurity
GetSecurityDescriptorControl
AddAuditAccessAce
AddAccessDeniedAceEx
DeleteAce
MapGenericMask
AreAnyAccessesGranted
AllocateAndInitializeSid
IsValidSid
ObjectPrivilegeAuditAlarmW
ClearEventLogW
RegisterServiceCtrlHandlerW
Sections
.text Size: 87KB - Virtual size: 87KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 41KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 109KB - Virtual size: 36.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gfids Size: 512B - Virtual size: 284B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ