Static task
static1
Behavioral task
behavioral1
Sample
3f743d4c04179f241a58ecf18410bca30f6d956724dd67701d31c4399aeba3b8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
3f743d4c04179f241a58ecf18410bca30f6d956724dd67701d31c4399aeba3b8.exe
Resource
win10v2004-20220901-en
General
-
Target
3f743d4c04179f241a58ecf18410bca30f6d956724dd67701d31c4399aeba3b8
-
Size
197KB
-
MD5
3b8de1c7b32e36ed8db4caec60b7d84b
-
SHA1
33fbbcf00a88948b1ce8c03651312d7f4b1f5f25
-
SHA256
3f743d4c04179f241a58ecf18410bca30f6d956724dd67701d31c4399aeba3b8
-
SHA512
14aeed0b682c68448039f0d72f7961c82451d0740b061ebbeef4048ea0ed9277aa7b9e36b806fff7b288154fd96ad9e024673928cf7eb0c736e66834d1dd8307
-
SSDEEP
6144:m75UYiziSFM2OGhl61tqSFBXmrzDN5DCQnUYX5zH1bqB6WMM:kSrl6vhmfBra
Malware Config
Signatures
Files
-
3f743d4c04179f241a58ecf18410bca30f6d956724dd67701d31c4399aeba3b8.exe windows x86
dc8d8dbed86b7bc54787ff9d347f6cd0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegDeleteValueW
LookupAccountNameA
LookupSecurityDescriptorPartsW
CryptSignHashW
CryptEnumProvidersA
CryptContextAddRef
RegConnectRegistryA
CryptSetKeyParam
CryptAcquireContextW
RegFlushKey
RegEnumValueA
CryptDecrypt
LookupPrivilegeNameW
RegCreateKeyExA
RegEnumKeyA
RegReplaceKeyW
CryptDestroyKey
RegSetKeySecurity
CryptGenKey
RegCreateKeyW
RegSetValueA
LookupAccountSidW
ReportEventW
RegCreateKeyA
CryptSignHashA
CryptGetDefaultProviderW
RegSaveKeyA
LookupPrivilegeDisplayNameA
RegSaveKeyW
RegQueryValueExA
CryptExportKey
RegConnectRegistryW
GetUserNameA
RegSetValueExA
RegQueryValueExW
AbortSystemShutdownA
RegEnumKeyExW
CryptGetDefaultProviderA
CryptEncrypt
CryptGetKeyParam
CryptSetProviderW
CryptAcquireContextA
LookupSecurityDescriptorPartsA
RegRestoreKeyA
RegQueryValueW
RegOpenKeyExA
RegQueryInfoKeyW
RegQueryInfoKeyA
RegSetValueExW
CryptGetProvParam
LogonUserA
RegCloseKey
DuplicateTokenEx
RegLoadKeyA
CryptHashData
StartServiceW
InitiateSystemShutdownA
CryptDuplicateHash
RegLoadKeyW
CryptVerifySignatureA
RegDeleteKeyW
CryptGetUserKey
RegOpenKeyW
CreateServiceA
CryptSetProviderExW
RegDeleteValueA
RegOpenKeyExW
DuplicateToken
GetUserNameW
CryptGetHashParam
CryptCreateHash
RegDeleteKeyA
CryptSetProviderExA
CryptSetProvParam
CryptHashSessionKey
RegQueryMultipleValuesA
InitializeSecurityDescriptor
CryptImportKey
RegNotifyChangeKeyValue
RegQueryMultipleValuesW
CryptEnumProvidersW
LookupPrivilegeNameA
RegRestoreKeyW
CryptDuplicateKey
LookupPrivilegeValueW
LookupAccountSidA
CryptReleaseContext
ReportEventA
CryptDestroyHash
InitiateSystemShutdownW
CryptEnumProviderTypesW
RegOpenKeyA
RegEnumKeyExA
RegEnumKeyW
StartServiceA
CryptDeriveKey
LookupPrivilegeValueA
CryptSetProviderA
RegSetValueW
wininet
InternetSetOptionExW
InternetQueryOptionA
InternetShowSecurityInfoByURL
InternetTimeToSystemTime
InternetOpenA
InternetLockRequestFile
InternetCombineUrlW
InternetDialW
HttpCheckDavCompliance
InternetConfirmZoneCrossingW
DeleteUrlCacheEntryA
InternetConfirmZoneCrossingA
InternetSetDialStateA
DeleteUrlCacheContainerA
HttpEndRequestW
InternetErrorDlg
InternetSetCookieA
InternetTimeToSystemTimeW
InternetHangUp
FindFirstUrlCacheContainerW
InternetReadFileExW
InternetTimeToSystemTimeA
FtpGetFileA
InternetGoOnlineW
InternetTimeFromSystemTime
InternetOpenUrlA
InternetFindNextFileW
InternetSetDialStateW
InternetGetCookieW
HttpAddRequestHeadersA
IsUrlCacheEntryExpiredW
InternetQueryOptionW
InternetGetConnectedStateExA
ShowX509EncodedCertificate
FtpPutFileA
GetUrlCacheConfigInfoA
RunOnceUrlCache
InternetSecurityProtocolToStringW
GopherGetLocatorTypeA
FtpSetCurrentDirectoryA
GopherCreateLocatorA
CreateUrlCacheEntryA
HttpQueryInfoW
FtpRemoveDirectoryW
GetUrlCacheHeaderData
SetUrlCacheConfigInfoA
InternetSecurityProtocolToStringA
IsHostInProxyBypassList
FtpFindFirstFileW
RetrieveUrlCacheEntryStreamW
InternetUnlockRequestFile
InternetReadFileExA
FtpGetCurrentDirectoryA
GopherOpenFileW
GopherGetAttributeA
FindFirstUrlCacheEntryExA
FtpCommandW
FtpRenameFileA
UnlockUrlCacheEntryStream
UnlockUrlCacheEntryFileW
InternetWriteFileExA
CommitUrlCacheEntryW
FindFirstUrlCacheEntryW
SetUrlCacheEntryInfoW
FtpGetCurrentDirectoryW
InternetAutodial
InternetGoOnline
ShowCertificate
InternetGetLastResponseInfoW
FtpPutFileW
HttpSendRequestW
InternetGetConnectedStateExW
IsUrlCacheEntryExpiredA
InternetCheckConnectionA
InternetDialA
ShowClientAuthCerts
SetUrlCacheEntryGroup
UnlockUrlCacheEntryFileA
InternetCloseHandle
HttpSendRequestExA
DetectAutoProxyUrl
FreeUrlCacheSpaceA
FtpOpenFileA
GetUrlCacheEntryInfoExW
GetUrlCacheEntryInfoA
InternetCreateUrlW
GopherGetLocatorTypeW
InternetConfirmZoneCrossing
GopherFindFirstFileW
InternetSetOptionExA
FtpPutFileEx
HttpSendRequestA
InternetGoOnlineA
FtpOpenFileW
GetUrlCacheConfigInfoW
InternetGetLastResponseInfoA
InternetGetCertByURL
UrlZonesDetach
InternetSetCookieW
SetUrlCacheEntryInfoA
InternetShowSecurityInfoByURLA
InternetAlgIdToStringA
InternetGetCookieA
InternetTimeFromSystemTimeA
GopherFindFirstFileA
InternetAlgIdToStringW
IncrementUrlCacheHeaderData
FtpCommandA
FindNextUrlCacheEntryExA
SetUrlCacheConfigInfoW
DeleteUrlCacheGroup
ResumeSuspendedDownload
InternetSetDialState
CreateUrlCacheContainerW
HttpQueryInfoA
InternetWriteFile
FtpSetCurrentDirectoryW
InternetAutodialHangup
FtpGetFileSize
InternetFindNextFileA
InternetCheckConnectionW
RetrieveUrlCacheEntryFileW
InternetFortezzaCommand
GopherGetAttributeW
ReadUrlCacheEntryStream
HttpOpenRequestW
LoadUrlCacheContent
FindNextUrlCacheEntryW
HttpSendRequestExW
CommitUrlCacheEntryA
DeleteUrlCacheEntry
FindNextUrlCacheContainerA
DeleteUrlCacheEntryW
CreateUrlCacheGroup
GetUrlCacheGroupAttributeW
InternetCombineUrlA
FtpFindFirstFileA
InternetOpenW
InternetAttemptConnect
FtpRemoveDirectoryA
FtpGetFileEx
CreateUrlCacheContainerA
InternetInitializeAutoProxyDll
FindFirstUrlCacheContainerA
InternetSetOptionW
FtpDeleteFileW
InternetWriteFileExW
InternetGetConnectedStateEx
InternetTimeFromSystemTimeW
InternetCreateUrlA
FreeUrlCacheSpaceW
FtpRenameFileW
FtpDeleteFileA
UnlockUrlCacheEntryFile
GetUrlCacheEntryInfoExA
InternetCanonicalizeUrlW
InternetCrackUrlW
FindNextUrlCacheEntryA
CreateUrlCacheEntryW
InternetShowSecurityInfoByURLW
FindFirstUrlCacheEntryExW
FindNextUrlCacheGroup
InternetConnectW
InternetOpenUrlW
SetUrlCacheEntryGroupA
FindCloseUrlCache
GetUrlCacheEntryInfoW
SetUrlCacheEntryGroupW
RetrieveUrlCacheEntryFileA
RegisterUrlCacheNotification
InternetQueryDataAvailable
GopherCreateLocatorW
InternetSetOptionA
ShowSecurityInfo
InternetConnectA
InternetSetFilePointer
InternetQueryFortezzaStatus
FtpGetFileW
SetUrlCacheHeaderData
InternetReadFile
FtpCreateDirectoryW
FtpCreateDirectoryA
InternetCrackUrlA
RetrieveUrlCacheEntryStreamA
InternetGetConnectedState
UpdateUrlCacheContentPath
InternetCanonicalizeUrlA
DeleteUrlCacheContainerW
FindFirstUrlCacheEntryA
FindFirstUrlCacheGroup
GopherOpenFileA
InternetGetCertByURLA
GetUrlCacheGroupAttributeA
HttpAddRequestHeadersW
FindNextUrlCacheEntryExW
user32
SendNotifyMessageA
LoadMenuIndirectW
EditWndProc
SendNotifyMessageW
CreateAcceleratorTableA
ReplyMessage
ChangeMenuA
GetIconInfo
CreateIconFromResource
WindowFromDC
EnumDisplayDevicesW
EnumDisplayMonitors
ReleaseCapture
GetWindowModuleFileNameW
GetGUIThreadInfo
ClipCursor
SetWindowTextA
SendMessageTimeoutW
GetCaretPos
InSendMessage
FreeDDElParam
DdeQueryStringW
GetWindowInfo
SetMenuItemInfoW
ToAscii
GetTopWindow
GrayStringW
CreateIcon
RegisterWindowMessageA
GetCapture
TabbedTextOutW
DefWindowProcA
WinHelpW
GetMenuCheckMarkDimensions
TabbedTextOutA
GetClipboardFormatNameW
GrayStringA
ExitWindowsEx
HideCaret
SetUserObjectSecurity
CheckRadioButton
InsertMenuItemW
SetScrollRange
SetClassLongW
CreateDialogIndirectParamW
SetMessageExtraInfo
GetClassNameW
SetWindowWord
OpenWindowStationA
SetMenuContextHelpId
CharUpperW
LoadCursorFromFileW
GetKeyState
WaitMessage
EnumDisplaySettingsExW
GetWindowThreadProcessId
DrawTextW
CharUpperA
EnumPropsExW
CreateMDIWindowW
DdeAccessData
RegisterClassExA
GetMessageA
VkKeyScanW
GetTabbedTextExtentA
EnumDisplaySettingsA
EnumPropsA
LoadMenuA
GetInputDesktop
AdjustWindowRect
ValidateRgn
OpenIcon
CreateDialogParamA
GetMenuStringW
CharToOemBuffA
EndDialog
LoadBitmapW
GetInputState
IsDialogMessageA
CreateDialogIndirectParamA
CreateWindowStationA
GetClassLongA
GetMessagePos
SetWindowTextW
BeginPaint
DefMDIChildProcW
IsMenu
GetDesktopWindow
RegisterClassExW
wsock32
send
ord1117
WSAAsyncGetServByName
WSAAsyncGetHostByAddr
recvfrom
Sections
.text Size: 83KB - Virtual size: 83KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 113KB - Virtual size: 113KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE