?sesmic@@YGKPA_K@Z
Static task
static1
Behavioral task
behavioral1
Sample
38fd6ae14e0e4d8f84fdc19aee1e6efea57e2c09e84470cfb672b3e2a3250695.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
38fd6ae14e0e4d8f84fdc19aee1e6efea57e2c09e84470cfb672b3e2a3250695.exe
Resource
win10v2004-20220812-en
General
-
Target
38fd6ae14e0e4d8f84fdc19aee1e6efea57e2c09e84470cfb672b3e2a3250695
-
Size
313KB
-
MD5
779a62914d03e2f92fbec969d2c35b00
-
SHA1
c491a5ca3064ea914698c6d6631e54be5f7d76f8
-
SHA256
38fd6ae14e0e4d8f84fdc19aee1e6efea57e2c09e84470cfb672b3e2a3250695
-
SHA512
88c8dae1ca8524c29509bf1f913d565d92d297efc62b181877016c1c10fd1900e4701b775614003b74f022d1f1f381f929089f764e588170ca0fce5b719dfa95
-
SSDEEP
6144:BZDT00t6r7k8Gii7w9GtFZTzbTGNE1baeLBH0TrEUnTSkRGM:BZDT00tv7w9cvTzfGia2LUnTSo
Malware Config
Signatures
Files
-
38fd6ae14e0e4d8f84fdc19aee1e6efea57e2c09e84470cfb672b3e2a3250695.exe windows x86
88c987b43812572388f9f3a89da217ee
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
SHBindToParent
ExtractAssociatedIconA
ord51
SHGetFolderPathAndSubDirA
ord180
SHGetFileInfoW
SHGetFolderPathW
ord17
ord730
SHGetDiskFreeSpaceExW
DoEnvironmentSubstA
ord170
SHInvokePrinterCommandA
ord14
comctl32
ImageList_LoadImageA
ImageList_GetImageCount
ImageList_Remove
DestroyPropertySheetPage
kernel32
GetModuleFileNameA
QueryDosDeviceW
CreateEventW
FindFirstVolumeMountPointW
GetWindowsDirectoryW
GetTempPathA
SetFileAttributesW
GetVolumeInformationW
GetFileAttributesExW
GetComputerNameA
GetThreadContext
DosDateTimeToFileTime
CreateFileA
SearchPathW
lstrlenA
GetLogicalDriveStringsW
GetTickCount
GetConsoleAliasesA
GetDriveTypeA
GetVersionExW
lstrcpynW
FileTimeToSystemTime
GetCompressedFileSizeA
ReleaseSemaphore
GetPrivateProfileIntW
IsDBCSLeadByteEx
GetProcAddress
FindVolumeMountPointClose
GetComputerNameExW
MoveFileW
EnumSystemCodePagesW
DefineDosDeviceA
WriteConsoleA
user32
SetMenuItemInfoA
DialogBoxIndirectParamA
GetUserObjectInformationW
RegisterClassW
PostThreadMessageW
SetMenuDefaultItem
DefMDIChildProcW
DefWindowProcA
CharUpperW
PeekMessageW
GetDlgCtrlID
GetWindowLongA
DdeSetUserHandle
LoadMenuW
MessageBoxA
CheckMenuRadioItem
DdeQueryConvInfo
CreateDialogIndirectParamW
CreateDialogIndirectParamA
LoadAcceleratorsW
SetPropW
CharLowerW
ShowCaret
CopyAcceleratorTableA
GetGuiResources
TrackPopupMenu
PostThreadMessageA
RemovePropW
MapVirtualKeyW
InvertRect
ClientToScreen
ArrangeIconicWindows
GetScrollPos
GetDialogBaseUnits
CharToOemA
GetKeyboardLayoutNameA
ToUnicodeEx
gdi32
SetPixel
GetCurrentObject
CreateDIBSection
SetPaletteEntries
CreateBitmapIndirect
Exports
Exports
Sections
.text Size: 45KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.closer Size: 61KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.cpp Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.artp Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dctp Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gktp Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.cdtp Size: 1024B - Virtual size: 716B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.iftp Size: 1024B - Virtual size: 684B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdat1 Size: 55KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdat2 Size: 44KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdat3 Size: 44KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdat4 Size: 33KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ