?FindLatestSection@@YAGPADG@Z
Static task
static1
Behavioral task
behavioral1
Sample
3caccc06ad7cd9c536f3c555f4d2c3f02440a60e3abda28080d126aa80b62336.exe
Resource
win7-20220901-en
General
-
Target
3caccc06ad7cd9c536f3c555f4d2c3f02440a60e3abda28080d126aa80b62336
-
Size
233KB
-
MD5
798fad5f7480ecf194659a098764e760
-
SHA1
01d527125d4fa55074d172283f1af959142ff1ad
-
SHA256
3caccc06ad7cd9c536f3c555f4d2c3f02440a60e3abda28080d126aa80b62336
-
SHA512
128a11138bf448531d2b39c76d556a41b6ba99ffa891df2b44fb1d0c93d576c9c04f570c28bc1df06d875dade17156c13764727b4ff74bf003d6432e3d2cb64c
-
SSDEEP
6144:YhvRaoghwypIm3WHRmnvklBkb39MxTeM8YhPQPxV:YFghZIm3MRmviC396TeMHQZV
Malware Config
Signatures
Files
-
3caccc06ad7cd9c536f3c555f4d2c3f02440a60e3abda28080d126aa80b62336.exe windows x86
f684d482986e7943a7ab9b42a025a96c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
SHDeleteKeyA
version
GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA
shell32
SHChangeNotify
kernel32
GetShortPathNameA
GetTempPathA
SetFileAttributesA
CopyFileA
DeleteFileA
GetSystemDirectoryA
GetWindowsDirectoryA
LocalFree
InterlockedExchange
GetThreadLocale
GetLocaleInfoA
GetACP
MultiByteToWideChar
WideCharToMultiByte
lstrlenW
CreateMutexA
ReleaseMutex
DeleteCriticalSection
Sleep
InitializeCriticalSection
GetModuleFileNameA
GetExitCodeThread
LoadLibraryExA
FormatMessageA
EnterCriticalSection
LeaveCriticalSection
GetPrivateProfileStringA
lstrcpyA
lstrcatA
FindFirstFileA
lstrcmpiA
FindNextFileA
FindClose
CreateDirectoryA
GetLocalTime
VirtualQuery
SetUnhandledExceptionFilter
WriteFile
IsBadWritePtr
WritePrivateProfileStringA
OutputDebugStringA
GlobalMemoryStatus
QueryPerformanceCounter
GetLogicalDrives
GetPrivateProfileSectionNamesA
GetDiskFreeSpaceA
GetSystemInfo
QueryPerformanceFrequency
GetPrivateProfileIntA
lstrlenA
lstrcpynA
TerminateProcess
GetExitCodeProcess
ResetEvent
ResumeThread
CreateEventA
LocalAlloc
OpenMutexA
SetLastError
GetFileAttributesA
ReadFile
SetEndOfFile
IsBadCodePtr
IsBadReadPtr
CreateFileA
SetStdHandle
VirtualProtect
SetFilePointer
VirtualAlloc
GetStringTypeW
GetStringTypeA
GetCurrentProcessId
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStdHandle
FlushFileBuffers
UnhandledExceptionFilter
CloseHandle
GetCurrentThread
GetVersionExA
GetLastError
WaitForSingleObject
CreateProcessA
FreeLibrary
GetTickCount
LoadLibraryA
GetCurrentProcess
GetModuleHandleA
GetProcAddress
HeapReAlloc
GetOEMCP
CompareStringA
CompareStringW
GetCPInfo
GetDriveTypeA
SetEnvironmentVariableA
HeapSize
LCMapStringW
LCMapStringA
TlsGetValue
TlsSetValue
TlsFree
HeapFree
HeapAlloc
ExitThread
GetCurrentThreadId
CreateThread
GetTimeZoneInformation
GetSystemTimeAsFileTime
GetStartupInfoA
GetCommandLineA
ExitProcess
RtlUnwind
RaiseException
HeapDestroy
HeapCreate
VirtualFree
TlsAlloc
user32
DestroyWindow
LoadStringA
GetMessageA
TranslateMessage
DispatchMessageA
LoadIconA
MsgWaitForMultipleObjects
PeekMessageA
SendMessageA
RegisterClassA
EnumDisplaySettingsA
SystemParametersInfoA
MessageBoxA
GetDesktopWindow
ExitWindowsEx
DefWindowProcA
PostQuitMessage
KillTimer
FindWindowA
SetTimer
PostMessageA
wsprintfA
CreateWindowExA
RegisterClassExA
LoadCursorA
advapi32
RegDeleteKeyA
RegDeleteValueA
IsValidSid
RegQueryInfoKeyA
RegEnumKeyExA
RegOpenKeyA
RegSetValueExA
RegCreateKeyExA
AdjustTokenPrivileges
LookupPrivilegeValueA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
FreeSid
EqualSid
AllocateAndInitializeSid
GetTokenInformation
OpenProcessToken
OpenThreadToken
RegEnumValueA
ole32
OleInitialize
OleUninitialize
CoCreateInstance
StringFromGUID2
CoCreateGuid
Exports
Exports
Sections
.text Size: 114KB - Virtual size: 113KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 80KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE