Static task
static1
Behavioral task
behavioral1
Sample
3a810cbad7296f83122c4a16b935a723d8019419069a55c939d93c246abed2ac.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
3a810cbad7296f83122c4a16b935a723d8019419069a55c939d93c246abed2ac.exe
Resource
win10v2004-20220414-en
General
-
Target
3a810cbad7296f83122c4a16b935a723d8019419069a55c939d93c246abed2ac
-
Size
654KB
-
MD5
693ef59145aa6b9e329f91538855ef64
-
SHA1
e3067d7c7227af026c0abfbdf7b417c4e294f380
-
SHA256
3a810cbad7296f83122c4a16b935a723d8019419069a55c939d93c246abed2ac
-
SHA512
3f0ad7a869823d63d1867f4bf2322e88a909324bab80e7e6d8906237db0aea669326030f16a337980681cfd94c86a955ccb2747ff41be0bf75da112a53693a6b
-
SSDEEP
12288:VEffffffgJLWR2sdxD0QcOImkmDcS2RpPe0q7AxlfgaQpLkP:VEffffffgJQJh0QcOImYle0q7ElfgFpU
Malware Config
Signatures
Files
-
3a810cbad7296f83122c4a16b935a723d8019419069a55c939d93c246abed2ac.exe windows x86
b933bb8364afc27e16c8073ea70ff235
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_AGGRESIVE_WS_TRIM
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
user32
PostMessageW
DispatchMessageA
GetDlgItemTextW
LoadStringA
GetPropW
GetClassLongW
IsCharUpperA
DrawStateA
IsDialogMessageA
LoadMenuA
CreateDesktopA
LoadIconW
LoadCursorA
kernel32
WaitForSingleObject
GetCurrentProcess
GetModuleHandleW
GetFileAttributesA
FindNextFileA
GetTempPathW
GetModuleFileNameA
IsBadReadPtr
GetExpandedNameW
GetCurrentThread
LoadLibraryA
GetProfileSectionA
GetProcAddress
GetStringTypeA
WaitNamedPipeA
InitializeCriticalSection
GetConsoleAliasW
SearchPathW
GetLogicalDriveStringsA
odbctrac
TraceSQLCancel
TraceSQLError
authz
AuthzFreeAuditEvent
AuthzInitializeContextFromSid
AuthzFreeResourceManager
AuthzFreeContext
modemui
drvSetDefaultCommConfigA
CountryRunOnce
Sections
.text Size: 59KB - Virtual size: 58KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 31KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 553KB - Virtual size: 553KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ