Static task
static1
Behavioral task
behavioral1
Sample
3784a63e29d1527f9a18e971d6de1cf79dec47a9a46734c3a39b4683c2fed146.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
3784a63e29d1527f9a18e971d6de1cf79dec47a9a46734c3a39b4683c2fed146.exe
Resource
win10v2004-20220812-en
General
-
Target
3784a63e29d1527f9a18e971d6de1cf79dec47a9a46734c3a39b4683c2fed146
-
Size
100KB
-
MD5
729ce3ea0182dda17be0a89d30166950
-
SHA1
47a33e03938651f5735a9b7a0be2b9a2a7ec110f
-
SHA256
3784a63e29d1527f9a18e971d6de1cf79dec47a9a46734c3a39b4683c2fed146
-
SHA512
354c0026c323e1c8bfc163b765e20a0515a069fc5637eae57620b32994870cf3d53e557d9bb2717355c79e6a628c669b45e72bbc90a485615a972c7c0806a58b
-
SSDEEP
3072:iVKiU14R+iu4E20XmRb+hzNyBUC6pOqI:FF6Tueb+hz4T
Malware Config
Signatures
Files
-
3784a63e29d1527f9a18e971d6de1cf79dec47a9a46734c3a39b4683c2fed146.exe windows x86
cf2644fbc102e9ed42452b4a560a8ae5
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msi
ord124
shlwapi
PathGetCharTypeW
kernel32
InitializeCriticalSection
HeapAlloc
HeapSize
RtlUnwind
GetModuleHandleW
lstrcmpA
VirtualAlloc
GetCommandLineW
GetCommandLineA
GetPriorityClass
GetProcessVersion
CompareStringA
GetOEMCP
GetLocaleInfoA
GetModuleFileNameW
GetFileType
FreeEnvironmentStringsA
HeapDestroy
HeapReAlloc
LoadLibraryExW
FindClose
GetStringTypeA
TlsGetValue
FindNextFileA
SetFilePointerEx
InterlockedDecrement
GlobalFree
LoadLibraryA
MultiByteToWideChar
LCMapStringW
RaiseException
CreateEventW
CreateFileMappingA
GetStdHandle
InterlockedExchange
LockResource
InterlockedExchangeAdd
lstrlenA
TlsAlloc
SetEvent
CreateThread
LeaveCriticalSection
GetEnvironmentStringsW
LocalFree
GetVersionExA
EnterCriticalSection
GetStringTypeW
FileTimeToSystemTime
FreeLibrary
FileTimeToLocalFileTime
GetACP
GetConsoleMode
IsProcessorFeaturePresent
CompareStringW
lstrlenW
ExitProcess
CreateEventA
WaitForSingleObject
GetProcessHeap
QueryPerformanceCounter
InterlockedIncrement
WideCharToMultiByte
SetHandleCount
GlobalAlloc
WaitForMultipleObjects
FreeEnvironmentStringsW
ReadFile
HeapSetInformation
GetStartupInfoW
SetUnhandledExceptionFilter
GetProcAddress
DecodePointer
WriteFile
GetModuleFileNameA
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
EncodePointer
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
GetLastError
GetCurrentThread
HeapCreate
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
FatalAppExitA
SetConsoleCtrlHandler
LoadLibraryW
GetLocaleInfoW
UnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
GetCPInfo
IsValidCodePage
HeapFree
Sleep
Sections
.text Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 43KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 17B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ