Static task
static1
Behavioral task
behavioral1
Sample
3627824e0bdae0129000a44252ff4c75d75d857f846ebe78519ccc9ee2361dfb.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
3627824e0bdae0129000a44252ff4c75d75d857f846ebe78519ccc9ee2361dfb.exe
Resource
win10v2004-20220901-en
General
-
Target
3627824e0bdae0129000a44252ff4c75d75d857f846ebe78519ccc9ee2361dfb
-
Size
65KB
-
MD5
43ce498d74f807421c9486f1a2f29790
-
SHA1
83e8b9be9eebef5829d4922cf250395266a749ef
-
SHA256
3627824e0bdae0129000a44252ff4c75d75d857f846ebe78519ccc9ee2361dfb
-
SHA512
01b158023632e30f6062ccad466fc51e6e10a5e28e112109ca762a0e4e7c9caabd0328a4b86d7a26e8514b0f9fb1655be2609a16bb09fee2f3c3d928934b1e7e
-
SSDEEP
1536:I4xbkAF0DJLMdB0xZFtutDKfATe8TpWmN1Q92tJK2XUNgnITRnj4ZwpNJK:zuDJLIEthYTe3mW27K2Wv9jQ
Malware Config
Signatures
Files
-
3627824e0bdae0129000a44252ff4c75d75d857f846ebe78519ccc9ee2361dfb.exe windows x86
75d8843adc05ede5bf7d1f58d8aabef4
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalLock
GetFileAttributesA
FindResourceW
GetFileAttributesW
VirtualAlloc
GetModuleHandleA
FindClose
GetCommandLineA
lstrcpyA
GetTimeZoneInformation
FindNextFileW
FindFirstFileW
VirtualProtect
WideCharToMultiByte
GetLastError
GetTickCount
HeapFree
OpenMutexW
GetModuleFileNameA
lstrcpyW
shlwapi
SHDeleteKeyA
PathMatchSpecW
StrStrW
wnsprintfA
wnsprintfW
PathFindFileNameW
wvnsprintfW
PathCombineW
wvnsprintfA
user32
GetIconInfo
MsgWaitForMultipleObjects
GetCursorPos
LoadCursorA
EndDialog
GetWindowLongA
CharLowerBuffA
GetMessageA
SendMessageA
GetClassNameA
ToUnicode
GetWindowTextA
CloseWindowStation
GetWindowThreadProcessId
GetKeyState
OpenWindowStationA
GetKeyboardState
GetForegroundWindow
GetDlgItem
advapi32
CryptReleaseContext
CryptHashData
GetUserNameW
DuplicateTokenEx
RegQueryValueExA
RegCreateKeyExA
RegSetValueExA
CryptDestroyHash
RegCloseKey
CryptGetHashParam
CryptCreateHash
RegEnumKeyExA
Sections
.text Size: 63KB - Virtual size: 63KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE