Static task
static1
Behavioral task
behavioral1
Sample
3c2be5f526c4334d0f02009c966a6801ea299a5a27aa5fbce3b4f41018ed262c.exe
Resource
win7-20220812-en
General
-
Target
3c2be5f526c4334d0f02009c966a6801ea299a5a27aa5fbce3b4f41018ed262c
-
Size
310KB
-
MD5
6ba0acdfe965e6ebdf24e62a4f5e53df
-
SHA1
bd73527f17c665acb412520fefb584dd5623ef12
-
SHA256
3c2be5f526c4334d0f02009c966a6801ea299a5a27aa5fbce3b4f41018ed262c
-
SHA512
22e5f1e406e563d9cabdb50c70c9fbb6852ea7129faacbc578845655de3ba4fb85992521331f2a59a77f1462e1458654dd770403b6148f9b1ba2efd7991669a6
-
SSDEEP
6144:co1NO8HykH3p5Hn6sYb++syjfeWagH74JqqDL6NV0RL1pTqPbrNI2jTx1SW6B2Bq:DXO+ob++syjfRagH74kqn6ngmI2jTyBD
Malware Config
Signatures
Files
-
3c2be5f526c4334d0f02009c966a6801ea299a5a27aa5fbce3b4f41018ed262c.exe windows x86
00cfd539c168f7a8ca51fe8f560c3588
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetFilePointer
Sleep
SetEndOfFile
GetFileSize
CreateFileA
WaitForSingleObject
OutputDebugStringA
InitializeCriticalSection
DeleteCriticalSection
GetLastError
SetLastError
LeaveCriticalSection
EnterCriticalSection
GetSystemDirectoryA
GetPrivateProfileStringA
GetPrivateProfileIntA
GetCurrentThreadId
GetCurrentProcessId
CreateNamedPipeA
FreeLibrary
GetProcAddress
LoadLibraryExA
CreateProcessA
ConnectNamedPipe
WriteFile
ReadFile
WaitForMultipleObjects
SetNamedPipeHandleState
WaitNamedPipeA
GetCurrentProcess
GetCurrentThread
CreateDirectoryA
CopyFileA
GetEnvironmentVariableA
GetModuleFileNameA
OpenEventA
LoadLibraryA
SetEvent
CloseHandle
CreateEventA
GetVersion
LocalAlloc
lstrcmpA
lstrlenA
LocalFree
GetFullPathNameA
GetVolumeInformationA
lstrcpynA
WideCharToMultiByte
FindClose
GetStartupInfoA
FindFirstFileA
GetModuleHandleA
user32
GetMessageA
CharUpperA
DispatchMessageA
TranslateMessage
ShowWindow
IsWindow
CreateWindowExA
RegisterClassA
LoadCursorA
LoadIconA
PostQuitMessage
DefWindowProcA
gdi32
GetStockObject
advapi32
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
RegOpenKeyA
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegSetValueExA
RegCreateKeyExA
GetTokenInformation
OpenProcessToken
OpenThreadToken
shell32
SHGetFolderPathA
msvcrt
_mbsnbcpy
_exit
_mbsinc
free
malloc
__CxxFrameHandler
??3@YAXPAX@Z
_purecall
??2@YAPAXI@Z
_mbsicmp
_mbslwr
localtime
time
_vsnprintf
wcslen
_vsnwprintf
memmove
_beginthreadex
printf
_errno
__p__fmode
_mbsstr
memset
_lrotr
_lrotl
calloc
__dllonexit
_onexit
_controlfp
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__set_app_type
_except_handler3
msvcp60
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
?_Xran@std@@YAXXZ
?_Split@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z
Sections
.text Size: 108KB - Virtual size: 106KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 28KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 60KB - Virtual size: 59KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 104KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE