Static task
static1
Behavioral task
behavioral1
Sample
3CECD1F8E18777AEC55790D4A060FA03824364BA8B9C7.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
3CECD1F8E18777AEC55790D4A060FA03824364BA8B9C7.exe
Resource
win10v2004-20220812-en
General
-
Target
3CECD1F8E18777AEC55790D4A060FA03824364BA8B9C7.exe
-
Size
319KB
-
MD5
ff6206eb0a8ad47c02f3b8a41cd3f80e
-
SHA1
bf2c144450e57c65f61010f89898275bdd7261c6
-
SHA256
3cecd1f8e18777aec55790d4a060fa03824364ba8b9c71eb0447705d8957d4b3
-
SHA512
243429b579c696e0b1bbf64d054adf64a2cc37545e7509439ae4b834b6c3dbce151a562a49fe205e783f12c4331287b5ad95ce0009bd583f4e5981eeb18c1dcc
-
SSDEEP
6144:5NivHFj0irOLRs79X3b9br3QRVosILggSCvTHWYso/j:n0FBeRs5Hb9vSosI0QvTh
Malware Config
Signatures
Files
-
3CECD1F8E18777AEC55790D4A060FA03824364BA8B9C7.exe.exe windows x86
98b9329a7eb6e97cc831608075bf14f7
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LocalSize
WriteConsoleInputA
EnumDateFormatsA
CopyFileExW
DnsHostnameToComputerNameA
VerifyVersionInfoA
FindNextFileW
VirtualUnlock
LockFile
GetProfileSectionW
RequestWakeupLatency
SetProcessPriorityBoost
GlobalGetAtomNameW
DeleteFileA
FindNextVolumeMountPointA
TlsSetValue
LoadResource
WriteConsoleInputW
GetConsoleTitleA
GetComputerNameExW
OpenEventA
CallNamedPipeW
GetModuleHandleA
GetSystemDirectoryA
GetDriveTypeA
BuildCommDCBAndTimeoutsW
GetProcAddress
GetShortPathNameA
ReleaseActCtx
GetCommandLineW
InterlockedIncrement
GetConsoleTitleW
CopyFileW
CreateActCtxW
FormatMessageA
EnterCriticalSection
FindNextVolumeA
GetThreadSelectorEntry
LoadLibraryA
CreateNamedPipeA
GetSystemDefaultLCID
GetConsoleAliasesLengthW
WriteProfileSectionA
AddAtomW
InterlockedDecrement
HeapFree
_hread
InterlockedExchangeAdd
GetStartupInfoA
CreateMailslotA
GetCPInfoExA
GetSystemWow64DirectoryW
GetLastError
GetPrivateProfileIntA
GetConsoleAliasExesLengthW
WaitForDebugEvent
EndUpdateResourceA
SetLastError
ExitThread
GetACP
lstrcatW
GetConsoleAliasA
GetDiskFreeSpaceExA
DefineDosDeviceW
CreateIoCompletionPort
EnumResourceLanguagesW
GetCPInfoExW
SetConsoleTextAttribute
SetInformationJobObject
WriteConsoleW
SetCriticalSectionSpinCount
GetComputerNameW
EnumSystemLocalesA
WritePrivateProfileSectionA
WritePrivateProfileStructA
GetPrivateProfileSectionNamesW
FileTimeToSystemTime
GlobalMemoryStatus
SetTapeParameters
lstrcmpW
SetEvent
FreeLibrary
FindResourceW
SetCommState
FormatMessageW
InterlockedCompareExchange
CreateFiber
GetConsoleFontSize
MoveFileA
LocalAlloc
SetFileShortNameW
lstrcpyA
HeapQueryInformation
SetCalendarInfoW
SetComputerNameW
GetConsoleAliasesA
EnumDateFormatsExA
GetConsoleOutputCP
GetStdHandle
GetLocalTime
GetStringTypeA
FindActCtxSectionStringA
FreeEnvironmentStringsA
GetModuleHandleExW
LoadLibraryW
GetBinaryTypeA
GetFileAttributesA
GetSystemWindowsDirectoryA
LocalFlags
GetSystemTimeAdjustment
SetProcessShutdownParameters
lstrcpynA
GlobalWire
FillConsoleOutputCharacterA
GetCompressedFileSizeA
GetFullPathNameA
ReadConsoleW
FreeUserPhysicalPages
WriteConsoleOutputCharacterA
OpenJobObjectA
CreateFileW
DeleteTimerQueueTimer
SetCurrentDirectoryW
GetNamedPipeHandleStateA
TerminateProcess
GetNamedPipeHandleStateW
CreateFileA
WideCharToMultiByte
RaiseException
GetCommandLineA
HeapValidate
IsBadReadPtr
DeleteCriticalSection
LeaveCriticalSection
GetModuleFileNameW
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetOEMCP
GetCPInfo
IsValidCodePage
TlsGetValue
GetModuleHandleW
TlsAlloc
GetCurrentThreadId
TlsFree
SetFilePointer
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
Sleep
ExitProcess
GetModuleFileNameA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
WriteFile
HeapAlloc
HeapSize
HeapReAlloc
VirtualAlloc
RtlUnwind
InitializeCriticalSectionAndSpinCount
DebugBreak
OutputDebugStringA
OutputDebugStringW
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeW
GetLocaleInfoA
SetStdHandle
FlushFileBuffers
GetConsoleCP
GetConsoleMode
WriteConsoleA
CloseHandle
user32
LoadMenuW
CharUpperW
GetMenuInfo
gdi32
SelectObject
msimg32
AlphaBlend
Sections
.text Size: 198KB - Virtual size: 197KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 70KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sixiwop Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.jegoxo Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gubirim Size: 512B - Virtual size: 150B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 47KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ