Static task
static1
Behavioral task
behavioral1
Sample
3372384a842f9000c0caa4eee7b0c672052c471e9856af7db7351e682135d7af.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
3372384a842f9000c0caa4eee7b0c672052c471e9856af7db7351e682135d7af.exe
Resource
win10v2004-20220901-en
General
-
Target
3372384a842f9000c0caa4eee7b0c672052c471e9856af7db7351e682135d7af
-
Size
125KB
-
MD5
68bacaa219f0722c01a2ca969b8e83b0
-
SHA1
1eae5f0bc2b0efdeaf18afe2b3480dcd3b15d4b6
-
SHA256
3372384a842f9000c0caa4eee7b0c672052c471e9856af7db7351e682135d7af
-
SHA512
795fb2b0929cf3013664a9a301e2235f0c15b253ff67c58c74ccf08f3cdbef4bca20fa46dd642bd097d712f125f2fa6ad20825eb8c6fbe181de67ccea3f99a51
-
SSDEEP
1536:HcPdwIG1cnbCo87UADi7wRxNko01dSIkQXCyypXSlJnxpvnc1r5LSOU/nkG4FmH/:sWI7URxNkMITpvnW5Mnj5kgwGX
Malware Config
Signatures
Files
-
3372384a842f9000c0caa4eee7b0c672052c471e9856af7db7351e682135d7af.exe windows x86
6ab5ff7887182592423456833a6b6003
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
IsProcessorFeaturePresent
ConvertDefaultLocale
SetThreadAffinityMask
TlsGetValue
FoldStringA
EnumSystemLanguageGroupsA
GetDateFormatA
SleepEx
GetProfileStringA
GetCurrentDirectoryW
DuplicateHandle
FindCloseChangeNotification
LocalCompact
GetCurrencyFormatW
AssignProcessToJobObject
CommConfigDialogA
CreateDirectoryW
EnumResourceLanguagesW
InitializeCriticalSection
GetCommMask
GetCPInfoExA
IsBadWritePtr
GetThreadContext
OpenSemaphoreW
SetFileApisToANSI
GetStringTypeExA
user32
CallWindowProcA
GetCapture
SetForegroundWindow
CharNextA
MenuItemFromPoint
DestroyMenu
GetDCEx
GetMessageExtraInfo
SendMessageTimeoutW
DdeSetUserHandle
GetKeyboardLayoutNameW
SetWindowsHookW
DrawTextExW
GetScrollPos
CreateAcceleratorTableW
GetTopWindow
IsDialogMessageW
UnpackDDElParam
DrawTextW
GetScrollRange
GetKeyNameTextW
DestroyIcon
DdeUnaccessData
LoadAcceleratorsW
GetClassLongA
RegisterClipboardFormatA
MessageBoxA
LoadKeyboardLayoutW
TrackMouseEvent
SetClipboardViewer
GetWindowPlacement
SetWindowLongA
SetKeyboardState
DdeInitializeA
GetWindowWord
FillRect
TranslateMessage
ClipCursor
ScreenToClient
IntersectRect
GetShellWindow
OpenInputDesktop
LoadCursorW
EnumPropsA
SendIMEMessageExA
GetGuiResources
GetSubMenu
RemoveMenu
GetWindowTextA
CharToOemW
GetLastActivePopup
FindWindowExW
GetMenuStringA
DeferWindowPos
GetMenuBarInfo
OpenWindowStationW
LockSetForegroundWindow
GetActiveWindow
ToUnicode
RealGetWindowClassW
DrawStateW
SetRectEmpty
GetMenuInfo
UnloadKeyboardLayout
DdeSetQualityOfService
RegisterWindowMessageA
DlgDirListW
SetDlgItemInt
OffsetRect
CheckDlgButton
DdeCreateDataHandle
WaitMessage
SetClipboardData
OemToCharBuffA
PostThreadMessageW
IMPGetIMEW
AppendMenuW
CharLowerA
GetProcessWindowStation
GetUserObjectInformationW
LoadBitmapW
GetMenuContextHelpId
GetClassInfoExW
IMPSetIMEW
DdeConnect
GetParent
MonitorFromRect
IsIconic
DdeAbandonTransaction
VkKeyScanA
Sections
.text Size: 76KB - Virtual size: 75KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 43KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
qgylgou Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE