Static task
static1
Behavioral task
behavioral1
Sample
a3a3e06e0644b4e74ac2c2849afa82911d9fcc1ef6c71641f4f3bcf0242b395a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a3a3e06e0644b4e74ac2c2849afa82911d9fcc1ef6c71641f4f3bcf0242b395a.exe
Resource
win10v2004-20220812-en
General
-
Target
a3a3e06e0644b4e74ac2c2849afa82911d9fcc1ef6c71641f4f3bcf0242b395a
-
Size
513KB
-
MD5
35fb35c382e46abc8365e28129bbe590
-
SHA1
00cc399fdfbcc4019ebe969d42a5ef8b8bfe5f21
-
SHA256
a3a3e06e0644b4e74ac2c2849afa82911d9fcc1ef6c71641f4f3bcf0242b395a
-
SHA512
86a694a38a4fb9c606b2eb2152f42c22f507c6fee46e429635b3d622a05c5c19d873bccb6ebc852caf72d5758310c9bee24eeae2c3b6c2e1c85a49fad786b1c8
-
SSDEEP
12288:IRqDHB4XcoWE29o61IuUoMfna/OFf3Mcnk+/XY:IRmB4Xce8o61UoMfna2Ff8cD
Malware Config
Signatures
Files
-
a3a3e06e0644b4e74ac2c2849afa82911d9fcc1ef6c71641f4f3bcf0242b395a.exe windows x86
7d6bd73015da3bb4471a413a1a31826a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentProcess
TerminateProcess
WideCharToMultiByte
MultiByteToWideChar
CopyFileW
DeleteFileW
SetFileAttributesW
GetFileAttributesW
IsDBCSLeadByte
GetModuleFileNameW
FindClose
WaitForSingleObject
CreateProcessW
GetCurrentThreadId
CompareStringW
GetTickCount
GetProcessHeap
SetEndOfFile
WriteConsoleW
LoadLibraryW
HeapReAlloc
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
FlushFileBuffers
HeapSize
SetStdHandle
SetFilePointer
GetCurrentDirectoryW
PeekNamedPipe
GetFileInformationByHandle
GetFullPathNameW
IsValidCodePage
GetOEMCP
GetACP
GetConsoleMode
GetConsoleCP
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
FreeResource
LockResource
LoadResource
SizeofResource
GetLastError
FindResourceW
GetModuleHandleW
WriteFile
CloseHandle
ReadFile
GetFileSize
Sleep
CreateFileW
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
GetTimeZoneInformation
InitializeCriticalSection
HeapCreate
GetLocaleInfoW
GetStdHandle
InitializeCriticalSectionAndSpinCount
IsProcessorFeaturePresent
ExitProcess
SetEnvironmentVariableA
GetProcAddress
SetLastError
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
LCMapStringW
GetCPInfo
MoveFileW
FindFirstFileExW
GetDriveTypeW
FileTimeToLocalFileTime
FileTimeToSystemTime
RtlUnwind
RaiseException
HeapAlloc
GetStartupInfoW
HeapSetInformation
GetCommandLineW
HeapFree
CreateThread
ExitThread
DecodePointer
EncodePointer
InterlockedIncrement
InterlockedDecrement
GetStringTypeW
InterlockedCompareExchange
InterlockedExchange
user32
SetRect
GetSystemMetrics
SetWindowPos
MessageBoxA
BeginPaint
EndPaint
PeekMessageW
TranslateMessage
DispatchMessageW
SendMessageW
MessageBoxW
SetWindowTextW
GetDC
ReleaseDC
GetWindowRect
LoadBitmapW
GetWindowLongW
ShowWindow
CreateDialogParamW
PostQuitMessage
DestroyWindow
UnregisterClassW
GetDlgCtrlID
SetWindowRgn
SetDlgItemTextW
ReleaseCapture
SetCapture
SystemParametersInfoW
SetWindowLongW
gdi32
GetDIBits
ExtCreateRegion
DeleteObject
CreateFontW
DeleteDC
BitBlt
SelectObject
CreateCompatibleDC
GetObjectW
CreateICW
winmm
timeGetTime
wininet
HttpQueryInfoW
InternetOpenUrlW
InternetOpenW
InternetQueryDataAvailable
InternetCloseHandle
InternetReadFile
Sections
.text Size: 184KB - Virtual size: 184KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 176KB - Virtual size: 176KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
��"*Ap Size: 97KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE