Static task
static1
Behavioral task
behavioral1
Sample
38e2a005a66ed8672ed8a37ed89db5ed2951687aa4b9e5427067517b1db1e844.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
38e2a005a66ed8672ed8a37ed89db5ed2951687aa4b9e5427067517b1db1e844.exe
Resource
win10v2004-20220812-en
General
-
Target
38e2a005a66ed8672ed8a37ed89db5ed2951687aa4b9e5427067517b1db1e844
-
Size
390KB
-
MD5
63be408828460eaa182f682948f5c290
-
SHA1
15a10e4bcd971b10fedd68fbd474d008be102d61
-
SHA256
38e2a005a66ed8672ed8a37ed89db5ed2951687aa4b9e5427067517b1db1e844
-
SHA512
f9c5365e70a187c097ae700cd1ef217dbe6c3aec3c1e99e865a2840abc73880fe3fcd594e18e2ca39c3af8ade2c9076cfd0e8d17e9bd172c22548afa3a38e7f2
-
SSDEEP
3072:FrNiD1LAKiPWNIup0566tOoGdy4TCjdUhDYBw/ume5wu/1xfnEPXI06OyFf5j7S:s10rQIr566tODdyIcQTYfuI01sBS
Malware Config
Signatures
Files
-
38e2a005a66ed8672ed8a37ed89db5ed2951687aa4b9e5427067517b1db1e844.exe windows x86
185c971b924f059b067fb7c9685ec8bc
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentProcessId
LocalAlloc
LeaveCriticalSection
TlsGetValue
EnterCriticalSection
GlobalReAlloc
GlobalHandle
InitializeCriticalSection
TlsAlloc
TlsSetValue
LocalReAlloc
DeleteCriticalSection
TlsFree
GlobalGetAtomNameA
lstrcmpA
LoadLibraryA
FlushFileBuffers
GetCurrentProcess
FreeLibrary
GlobalAddAtomA
GlobalFlags
GetLocaleInfoA
GlobalDeleteAtom
GetVersionExA
lstrcmpW
GlobalFindAtomA
GetCPInfo
GetOEMCP
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapFree
GetSystemTimeAsFileTime
ExitProcess
HeapAlloc
GetCommandLineA
RtlUnwind
RaiseException
VirtualAlloc
HeapReAlloc
HeapSize
GetACP
IsValidCodePage
HeapCreate
VirtualFree
GetConsoleCP
GetConsoleMode
GetStdHandle
InitializeCriticalSectionAndSpinCount
SetHandleCount
GetFileType
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
InterlockedDecrement
InterlockedIncrement
GetModuleHandleA
GetModuleHandleW
GetProcAddress
CompareStringA
SetLastError
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageA
LocalFree
MultiByteToWideChar
SetFileTime
WriteFile
CreateDirectoryA
GetFileAttributesA
LocalFileTimeToFileTime
GetCurrentDirectoryA
SystemTimeToFileTime
SetFilePointer
CreateFileA
lstrlenA
FindResourceA
LoadResource
LockResource
SizeofResource
WideCharToMultiByte
OutputDebugStringA
GetLastError
CreateMutexA
GetCurrentThreadId
GetTempPathA
GetModuleFileNameA
GetWindowsDirectoryA
Sleep
ReadFile
CloseHandle
CreateProcessA
GetStartupInfoA
CreatePipe
user32
WinHelpA
RegisterWindowMessageA
TabbedTextOutA
DrawTextA
DrawTextExA
GrayStringA
DestroyMenu
SetMenu
GetClientRect
GetClassInfoExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
CopyRect
CallWindowProcA
GetMenu
SystemParametersInfoA
GetWindowPlacement
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
ModifyMenuA
EnableMenuItem
CheckMenuItem
SetForegroundWindow
IsIconic
PostMessageA
SetWindowPos
GetCapture
IsWindow
GetDlgItem
SetWindowsHookExA
CallNextHookEx
GetKeyState
PeekMessageA
ValidateRect
GetFocus
ClientToScreen
GetWindow
GetDlgCtrlID
GetWindowRect
GetClassNameA
PtInRect
SetWindowTextA
GetWindowTextA
GetWindowThreadProcessId
SendMessageA
GetParent
GetWindowLongA
GetLastActivePopup
IsWindowEnabled
EnableWindow
MessageBoxA
UnhookWindowsHookEx
GetSystemMetrics
GetDC
ReleaseDC
GetSysColor
GetSysColorBrush
GetMenuState
LoadStringA
LoadAcceleratorsA
GetMessageA
TranslateAcceleratorA
GetMenuItemID
GetMenuItemCount
GetSubMenu
TranslateMessage
DispatchMessageA
GetClassLongA
SetPropA
GetPropA
RemovePropA
LoadIconA
LoadCursorA
CreateWindowExA
ShowWindow
UpdateWindow
DialogBoxParamA
DestroyWindow
DefWindowProcA
BeginPaint
EndPaint
PostQuitMessage
EndDialog
wsprintfA
GetForegroundWindow
GetTopWindow
GetMessageTime
GetMessagePos
SetWindowLongA
MapWindowPoints
advapi32
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
shell32
ShellExecuteA
urlmon
URLDownloadToFileA
wininet
InternetOpenA
InternetReadFile
InternetCloseHandle
HttpOpenRequestA
HttpSendRequestA
HttpQueryInfoA
InternetQueryDataAvailable
InternetConnectA
oleacc
LresultFromObject
CreateStdAccessibleObject
gdi32
DeleteDC
GetStockObject
DeleteObject
CreateBitmap
GetClipBox
SetTextColor
SetBkColor
SaveDC
RestoreDC
SetMapMode
ScaleWindowExtEx
SetWindowExtEx
PtVisible
ScaleViewportExtEx
SetViewportExtEx
RectVisible
TextOutA
ExtTextOutA
Escape
SelectObject
OffsetViewportOrgEx
GetDeviceCaps
SetViewportOrgEx
winspool.drv
OpenPrinterA
DocumentPropertiesA
ClosePrinter
oleaut32
VariantClear
VariantChangeType
VariantInit
Sections
.text Size: 145KB - Virtual size: 145KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 90KB - Virtual size: 105KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 181KB - Virtual size: 180KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 30KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ