Static task
static1
Behavioral task
behavioral1
Sample
3dd5b6a9f782fb16c27e8c4c97820d09f289f985aa0a7ae717ad3a74ce0e4c6d.exe
Resource
win7-20220812-en
General
-
Target
3dd5b6a9f782fb16c27e8c4c97820d09f289f985aa0a7ae717ad3a74ce0e4c6d
-
Size
466KB
-
MD5
4372f251bf020ea7d79e5a0de9c46550
-
SHA1
abed26cfc1b836492a6b4765471ae7fbed743f6f
-
SHA256
3dd5b6a9f782fb16c27e8c4c97820d09f289f985aa0a7ae717ad3a74ce0e4c6d
-
SHA512
4fcc7bfd33c8211fef19c89d882f19cb7bb2375997c40c7c790c82755bcb1656fa794a37fdfd0ede27520af74eca79455ffb64f8a166eeef6eba479110d32b7b
-
SSDEEP
6144:mEsSbAGMexVuCx/ktCzE1Ywrtm17Pi5kLobtC/rDV7/LJw6xzp2syQFW1:mEsJCxYCX7Pi5kUb4X9/LNp2syQFW1
Malware Config
Signatures
Files
-
3dd5b6a9f782fb16c27e8c4c97820d09f289f985aa0a7ae717ad3a74ce0e4c6d.exe windows x86
d6e47844f81d1ea0566c96c4e75b5622
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LockFile
UnlockFile
SetEndOfFile
GetFileSize
DuplicateHandle
GetVolumeInformationW
GetFullPathNameW
CreateFileW
FileTimeToLocalFileTime
GetFileSizeEx
GetFileTime
GlobalFlags
GetModuleHandleA
WritePrivateProfileStringW
SetErrorMode
GetStartupInfoW
Sleep
ExitProcess
GetSystemTimeAsFileTime
UnhandledExceptionFilter
IsDebuggerPresent
HeapAlloc
HeapFree
RtlUnwind
RaiseException
FlushFileBuffers
SetStdHandle
GetFileType
HeapSize
VirtualAlloc
GetSystemInfo
VirtualQuery
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetStartupInfoA
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTimeZoneInformation
InitializeCriticalSectionAndSpinCount
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
LCMapStringW
GetConsoleCP
GetConsoleMode
LCMapStringA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
SetEnvironmentVariableA
SetFilePointer
WriteFile
ReadFile
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
LocalAlloc
lstrlenA
GetTickCount
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesW
lstrcmpA
GetLocaleInfoW
CompareStringA
InterlockedExchange
FileTimeToSystemTime
GetThreadLocale
GetCurrentProcessId
FreeResource
GetCurrentThreadId
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
CompareStringW
LoadLibraryA
lstrcmpW
GetVersionExA
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageW
LocalFree
MulDiv
GetLastError
SetLastError
GetModuleFileNameW
TerminateProcess
MultiByteToWideChar
WideCharToMultiByte
LoadLibraryW
FreeLibrary
IsBadWritePtr
InterlockedDecrement
InterlockedIncrement
SetUnhandledExceptionFilter
GetCommandLineW
FindClose
lstrlenW
GetFileAttributesW
FindFirstFileW
LockResource
SizeofResource
LoadResource
FindResourceW
WriteProcessMemory
CloseHandle
DeleteCriticalSection
VirtualProtect
EnterCriticalSection
GetProcAddress
LeaveCriticalSection
GetVersionExW
ReadProcessMemory
InitializeCriticalSection
GetModuleHandleW
GetCurrentProcess
HeapReAlloc
user32
EndDialog
CreateDialogIndirectParamW
TabbedTextOutW
DestroyMenu
GetDesktopWindow
ClientToScreen
GetDC
ReleaseDC
GetSysColorBrush
CharUpperW
RegisterClipboardFormatW
GetMessageW
TranslateMessage
GetActiveWindow
GetCursorPos
ValidateRect
SetWindowContextHelpId
MapDialogRect
SetCursor
PostQuitMessage
CharNextW
ShowWindow
MoveWindow
SetWindowTextW
IsDialogMessageW
IsWindowEnabled
RegisterWindowMessageW
LoadIconW
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
IsChild
GetCapture
SetWindowsHookExW
PostThreadMessageW
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
IsWindow
SetFocus
GetWindowTextW
GetForegroundWindow
GetLastActivePopup
BeginPaint
DispatchMessageW
GetDlgItem
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageW
MapWindowPoints
SetMenu
SetForegroundWindow
IsWindowVisible
UpdateWindow
PostMessageW
MessageBoxW
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
GetSysColor
AdjustWindowRectEx
EqualRect
GetDlgCtrlID
DefWindowProcW
CallWindowProcW
CopyRect
PtInRect
GetMenu
GetWindowLongW
SetWindowLongW
SetWindowPos
OffsetRect
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetSystemMetrics
GetWindow
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
GetFocus
UnregisterClassW
MessageBeep
GetNextDlgTabItem
GetNextDlgGroupItem
ReleaseCapture
SetCapture
InvalidateRgn
InvalidateRect
CopyAcceleratorTableW
SetRect
IsRectEmpty
CallNextHookEx
EndPaint
ModifyMenuW
EnableMenuItem
CheckMenuItem
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
GetWindowRect
GetKeyState
GetParent
LoadCursorW
SetParent
GetClientRect
SendMessageW
EnableWindow
GetWindowDC
GrayStringW
DrawTextExW
SetActiveWindow
DrawTextW
GetTopWindow
GetWindowThreadProcessId
gdi32
RectVisible
TextOutW
Escape
SelectObject
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
DeleteDC
PtVisible
CreateRectRgnIndirect
GetRgnBox
GetMapMode
GetWindowExtEx
GetViewportExtEx
DeleteObject
GetTextColor
GetBkColor
GetStockObject
GetObjectW
SetBkColor
SetTextColor
GetClipBox
CreateBitmap
GetDeviceCaps
SetMapMode
RestoreDC
SaveDC
ExtTextOutW
comdlg32
GetFileTitleW
winspool.drv
ClosePrinter
OpenPrinterW
DocumentPropertiesW
advapi32
RegQueryValueW
RegEnumKeyW
RegDeleteKeyW
RegOpenKeyExW
RegSetValueExW
RegCloseKey
RegOpenKeyW
RegQueryValueExW
RegCreateKeyExW
shell32
CommandLineToArgvW
shlwapi
PathFindFileNameW
PathStripToRootW
PathIsUNCW
PathFindExtensionW
oledlg
OleUIBusyW
ole32
CoRevokeClassObject
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
OleInitialize
OleUninitialize
CLSIDFromProgID
CLSIDFromString
OleIsCurrentClipboard
CoTaskMemAlloc
CoTaskMemFree
CoFreeUnusedLibraries
CoInitializeEx
CoCreateInstance
OleFlushClipboard
CoRegisterMessageFilter
oleaut32
OleCreateFontIndirect
SysStringLen
SafeArrayDestroy
VariantCopy
SysAllocStringLen
VariantInit
VariantClear
SysAllocString
VariantChangeType
SysFreeString
SystemTimeToVariantTime
VariantTimeToSystemTime
winmm
waveOutWrite
Sections
.text Size: 220KB - Virtual size: 219KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 85KB - Virtual size: 85KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rmnet Size: 56KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE