Static task
static1
Behavioral task
behavioral1
Sample
3ceecdf8462028e27367f9f53e1a0711b69a58976a6c7ee3d90d2cc40d186920.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
3ceecdf8462028e27367f9f53e1a0711b69a58976a6c7ee3d90d2cc40d186920.exe
Resource
win10v2004-20220812-en
General
-
Target
3ceecdf8462028e27367f9f53e1a0711b69a58976a6c7ee3d90d2cc40d186920
-
Size
4.9MB
-
MD5
fd831a0c3fa6c5bda59d5c266aadda21
-
SHA1
946fb5aab1bb240784377eb8ec794b94a0ab97a6
-
SHA256
3ceecdf8462028e27367f9f53e1a0711b69a58976a6c7ee3d90d2cc40d186920
-
SHA512
a668d0b2349d37a441da7372a8588134eb26af9907874209f9a8f9d53379200700cf153bb63bb19582030ccd5ebbb360ca942b5eb4683edc616b918f302a14c5
-
SSDEEP
24576:fxXeAEpp0yLFNOTfpaF6AwZlSHwe6Lcq6LJnmlKVoZ3tk5786o:pXeAE0QfoBaF6A3w7qM36o
Malware Config
Signatures
Files
-
3ceecdf8462028e27367f9f53e1a0711b69a58976a6c7ee3d90d2cc40d186920.exe windows x86
8e5d0dc1d0be5577d2c72c33f261ec4f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
MultiByteToWideChar
GetVersionExW
GetModuleFileNameW
GetCommandLineW
FlushFileBuffers
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
CloseHandle
GetFileAttributesW
ReadFile
CreateFileW
GetFileSizeEx
SetFilePointer
GetLastError
SetEndOfFile
GetShortPathNameW
WriteFile
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoW
HeapReAlloc
HeapSize
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetStdHandle
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
RaiseException
Sleep
ExitProcess
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
LoadLibraryA
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetLocaleInfoA
WideCharToMultiByte
InitializeCriticalSection
RtlUnwind
GetConsoleCP
GetConsoleMode
user32
SendMessageW
LoadIconW
DialogBoxParamW
LoadStringW
MessageBoxW
GetFocus
GetDlgItem
SetDlgItemTextW
EndDialog
SetWindowTextW
comdlg32
GetSaveFileNameW
GetOpenFileNameW
Sections
.text Size: 60KB - Virtual size: 57KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 331KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ