Static task
static1
Behavioral task
behavioral1
Sample
3f9a4d1cb91411763b5f0359ae85f0db6044e948bc87384bfdd0310de6fb170c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
3f9a4d1cb91411763b5f0359ae85f0db6044e948bc87384bfdd0310de6fb170c.exe
Resource
win10v2004-20220812-en
General
-
Target
3f9a4d1cb91411763b5f0359ae85f0db6044e948bc87384bfdd0310de6fb170c
-
Size
48KB
-
MD5
6e9a558a27fe7f5c64c7b0a608b9f88e
-
SHA1
27269cc39766b59374696ca9c5886cbc9052c960
-
SHA256
3f9a4d1cb91411763b5f0359ae85f0db6044e948bc87384bfdd0310de6fb170c
-
SHA512
ed9c684f6dae4d551c19e33baef21cae0e704a131985706f27de8ddbb2c7c233d50c1742b3d63bf678daf3f4d2eb85e1c39742938aae39364b0396d752417cd8
-
SSDEEP
384:fJs2CoUmb59N3dSRt5cDY9ZunAjxbtc+frQUAMJt7d0MKG4c89FXZ59p:h7CS7hdsjc4xxzQYNl6p53
Malware Config
Signatures
Files
-
3f9a4d1cb91411763b5f0359ae85f0db6044e948bc87384bfdd0310de6fb170c.exe windows x86
32a00aab54229cf03aafb6fd0727fcca
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStdHandle
GetFileSize
Sleep
CopyFileExW
ReadFile
FindAtomA
GetFileTime
CreateDirectoryA
CreateThread
CopyFileW
ExitThread
CopyFileExA
GetCommandLineA
SetLastError
DeleteFileA
GetComputerNameA
DeleteFileW
WriteFile
FindFirstFileA
GetLastError
user32
GetFocus
CreateIcon
DrawIconEx
IsMenu
CloseWindow
DrawTextA
LoadCursorA
AlignRects
CopyImage
BlockInput
DialogBoxParamA
GetCursor
CopyIcon
AppendMenuW
AppendMenuA
LoadMenuA
comctl32
ImageList_BeginDrag
ImageList_DragLeave
ImageList_Remove
ImageList_Replace
ImageList_LoadImage
ImageList_GetIconSize
ImageList_DrawEx
ImageList_ReplaceIcon
ImageList_GetImageInfo
ImageList_GetDragImage
ImageList_AddIcon
ImageList_AddMasked
InitCommonControls
ImageList_DragMove
ImageList_Read
ImageList_GetImageRect
ImageList_Create
ImageList_EndDrag
advapi32
RegOpenKeyA
RegQueryInfoKeyW
RegEnumValueA
RegEnumKeyW
RegQueryValueA
RegFlushKey
RegReplaceKeyW
RegCreateKeyExW
RegEnumKeyExA
RegCreateKeyExA
RegOpenKeyExA
RegEnumKeyA
RegEnumValueW
RegReplaceKeyA
RegEnumKeyExW
RegDeleteValueA
RegDeleteValueW
RegCreateKeyW
Sections
.text Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 28KB - Virtual size: 87KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ