Static task
static1
Behavioral task
behavioral1
Sample
3f260a8d75cd4b19c00a6a8fc613f5fa694070e9fe972170bbbf1452c0f9f883.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
3f260a8d75cd4b19c00a6a8fc613f5fa694070e9fe972170bbbf1452c0f9f883.exe
Resource
win10v2004-20220812-en
General
-
Target
3f260a8d75cd4b19c00a6a8fc613f5fa694070e9fe972170bbbf1452c0f9f883
-
Size
339KB
-
MD5
64004cfe76df6adf152bb091612c1c30
-
SHA1
738e16f48b3bb55dda6866ab49abf239e05383d6
-
SHA256
3f260a8d75cd4b19c00a6a8fc613f5fa694070e9fe972170bbbf1452c0f9f883
-
SHA512
91cb9470b75465315ca198482ab6a441a483fe319a8326a3de5f3075c49b7b1d9142364277ee2f60c0ae8dc1e2df2a1e84d89780581b68583c885baf936d1431
-
SSDEEP
6144:PfB5m/lHa4ooTVErg5ogKPBe+DwNxA5gmCJvvFvmcHXR:Pf0weoPBSA5gxtvmch
Malware Config
Signatures
Files
-
3f260a8d75cd4b19c00a6a8fc613f5fa694070e9fe972170bbbf1452c0f9f883.exe windows x86
e108768b7fc3dd3e51c79af32eba1bf7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WideCharToMultiByte
LocalFree
SetLastError
GetLastError
lstrcpynA
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetModuleFileNameA
LocalAlloc
TlsAlloc
GlobalFree
GlobalUnlock
GlobalHandle
GlobalLock
GlobalReAlloc
GlobalAlloc
TlsSetValue
LocalReAlloc
InterlockedDecrement
GetVersion
CloseHandle
GetCurrentThreadId
GetModuleHandleA
lstrcpyA
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
lstrcmpiA
GlobalGetAtomNameA
lstrcatA
FreeLibrary
GetProcessVersion
lstrcmpA
GlobalFlags
GetCPInfo
GetOEMCP
WriteFile
FlushFileBuffers
RtlUnwind
RaiseException
HeapFree
HeapAlloc
GetTimeZoneInformation
GetSystemTime
GetLocalTime
TerminateProcess
HeapReAlloc
CreateThread
ExitThread
GetStartupInfoA
GetCommandLineA
HeapSize
GetACP
SetUnhandledExceptionFilter
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
InterlockedIncrement
ExitProcess
PeekNamedPipe
CreatePipe
GlobalSize
GetSystemDirectoryA
MultiByteToWideChar
lstrlenA
GetCurrentProcess
SetFilePointer
GetFileSize
FindNextFileA
DeleteFileA
LoadLibraryA
TlsGetValue
GetProcAddress
user32
SetWindowPos
SetWindowLongA
GetWindow
SetForegroundWindow
GetForegroundWindow
GetMessagePos
GetMessageTime
DefWindowProcA
RemovePropA
CallWindowProcA
GetPropA
SetPropA
GetClassLongA
DestroyWindow
GetDlgCtrlID
GetWindowTextA
GetDlgItem
GetMenuItemID
GetSubMenu
GetMenuItemCount
GetMenu
RegisterClassA
GetClassInfoA
WinHelpA
GetCapture
GetTopWindow
CopyRect
GetClientRect
AdjustWindowRectEx
SetFocus
GetSysColor
MapWindowPoints
PostMessageA
LoadIconA
RegisterWindowMessageA
SetWindowTextA
LoadCursorA
GetSysColorBrush
ReleaseDC
GetDC
GetClassNameA
PtInRect
ClientToScreen
PostQuitMessage
DestroyMenu
TabbedTextOutA
DrawTextA
GrayStringA
GetKeyState
CallNextHookEx
PeekMessageA
SetWindowsHookExA
UnhookWindowsHookEx
GetParent
GetLastActivePopup
IsWindowEnabled
GetWindowLongA
MessageBoxA
EnableWindow
LoadStringA
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
DestroyCursor
GetSystemMetrics
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
CreateWindowExA
SendMessageA
IsWindow
GetFocus
GetNextDlgTabItem
DispatchMessageA
gdi32
CreateCompatibleBitmap
GetDIBits
BitBlt
DeleteDC
DeleteObject
CreateCompatibleDC
CreateDIBSection
SelectObject
GetStockObject
RestoreDC
SaveDC
GetDeviceCaps
GetObjectA
SetBkColor
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
SetTextColor
GetClipBox
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
CreateBitmap
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
advapi32
StartServiceCtrlDispatcherA
LookupPrivilegeValueA
OpenProcessToken
InitializeSecurityDescriptor
AddAccessAllowedAce
CreateServiceA
LockServiceDatabase
ChangeServiceConfig2A
UnlockServiceDatabase
StartServiceA
CloseServiceHandle
AdjustTokenPrivileges
RegisterServiceCtrlHandlerA
SetServiceStatus
InitializeAcl
shell32
SHGetFileInfoA
comctl32
ord17
msvcrt
??0exception@@QAE@ABQBD@Z
??1exception@@UAE@XZ
??0exception@@QAE@ABV0@@Z
ws2_32
socket
setsockopt
connect
closesocket
ntohs
inet_addr
htons
gethostbyname
recv
send
WSACleanup
sendto
recvfrom
__WSAFDIsSet
getsockname
bind
accept
getpeername
listen
inet_ntoa
select
htonl
WSASocketA
WSAGetLastError
gethostname
WSAStartup
netapi32
NetUserAdd
NetLocalGroupAddMembers
wininet
InternetReadFile
avicap32
capCreateCaptureWindowA
capGetDriverDescriptionA
msvfw32
ICSeqCompressFrameEnd
ICCompressorFree
ICClose
ICOpen
ICSeqCompressFrame
ICSeqCompressFrameStart
ICSendMessage
psapi
EnumProcessModules
winspool.drv
DocumentPropertiesA
ClosePrinter
OpenPrinterA
Sections
.text Size: 313KB - Virtual size: 313KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ