Static task
static1
Behavioral task
behavioral1
Sample
38a8361b94931cb7a32eb53eaa9ca6861b21c050c37b44c6412e9967fbf47b88.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
38a8361b94931cb7a32eb53eaa9ca6861b21c050c37b44c6412e9967fbf47b88.exe
Resource
win10v2004-20220901-en
General
-
Target
38a8361b94931cb7a32eb53eaa9ca6861b21c050c37b44c6412e9967fbf47b88
-
Size
320KB
-
MD5
a1a7b78f1e98e888b0c62bb01918d410
-
SHA1
fde76e37e3c9ee5b2b257ed948eb5301ad98c354
-
SHA256
38a8361b94931cb7a32eb53eaa9ca6861b21c050c37b44c6412e9967fbf47b88
-
SHA512
ef18a78e6e99cb75c1d96499005c4d56e3ab9b463f99a0beab33b95f68938c6207b4c9365ed687f5d03b41194f3a0cc49362a9efa698539c1efe36636933c682
-
SSDEEP
6144:u1ofanT5BSogy3LH1SJdymI8Y7CeoCbpKShDGUH5WAD0g0:u1oA5BRxbH1SXyf8Y+4b5hlZ70g
Malware Config
Signatures
Files
-
38a8361b94931cb7a32eb53eaa9ca6861b21c050c37b44c6412e9967fbf47b88.exe windows x86
5dc47e259dba3ab210ec4a5c237756d1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
InitCommonControlsEx
ImageList_Create
advapi32
RegEnumKeyA
RegConnectRegistryA
RegQueryValueExA
GetUserNameA
LookupPrivilegeDisplayNameW
RegQueryValueExW
CryptGetKeyParam
AbortSystemShutdownW
CreateServiceA
RegDeleteKeyW
CryptVerifySignatureW
RegOpenKeyW
RegLoadKeyA
RegFlushKey
CryptDuplicateKey
CryptEnumProvidersA
AbortSystemShutdownA
user32
DefWindowProcA
MessageBoxW
SetWindowLongW
SetMenuContextHelpId
CheckDlgButton
GetKeyboardLayoutNameA
DestroyWindow
GetAncestor
DefWindowProcW
EnumChildWindows
DdeGetData
RegisterClassA
PtInRect
ShowWindow
RegisterClassExA
CreateWindowExA
TranslateAcceleratorW
DragObject
shell32
SHGetPathFromIDList
kernel32
GetSystemDirectoryA
FreeLibrary
VirtualQuery
GetTimeFormatA
RtlUnwind
LCMapStringW
GetMailslotInfo
GetModuleFileNameA
InterlockedDecrement
IsValidCodePage
TlsSetValue
TlsGetValue
TlsAlloc
GetVersionExA
WriteFile
EnumSystemLocalesA
CloseHandle
ReadFile
GlobalCompact
GetCurrentProcessId
GetLastError
GetSystemTimeAsFileTime
WriteConsoleW
GlobalDeleteAtom
CompareStringW
GetFileType
GetCurrentThread
GetCommandLineA
GetStartupInfoA
GetUserDefaultLCID
InitializeCriticalSectionAndSpinCount
HeapSize
GetDateFormatA
GetConsoleCP
GetStringTypeA
GetModuleHandleW
GetLocaleInfoA
GetEnvironmentStringsW
ExitProcess
Sleep
GlobalAddAtomW
HeapReAlloc
WaitNamedPipeW
TerminateProcess
GetThreadLocale
WideCharToMultiByte
WriteConsoleA
GetModuleHandleA
IsValidLocale
ExitThread
GetLocaleInfoW
AddAtomW
FlushFileBuffers
LocalReAlloc
EnterCriticalSection
SetHandleCount
CompareStringA
InterlockedIncrement
GetCPInfo
GetDriveTypeA
HeapCreate
GetComputerNameA
SetStdHandle
LCMapStringA
SetEnvironmentVariableA
GetConsoleOutputCP
GetTimeZoneInformation
GetStdHandle
GetCurrentProcess
GetStringTypeW
LeaveCriticalSection
CreateMutexA
FreeEnvironmentStringsA
TlsFree
FreeEnvironmentStringsW
HeapAlloc
IsDebuggerPresent
InterlockedExchange
QueryPerformanceCounter
VirtualAlloc
FillConsoleOutputCharacterW
SetLastError
FindFirstFileExW
SetUnhandledExceptionFilter
GetCurrentThreadId
GetTickCount
OpenMutexA
GetThreadPriority
DeleteCriticalSection
HeapDestroy
CreateFileA
LoadLibraryA
GetACP
SetConsoleCtrlHandler
DeleteFiber
FindFirstFileA
SetFilePointer
UnhandledExceptionFilter
GetEnvironmentStrings
GetProcAddress
GetConsoleMode
VirtualFree
GetOEMCP
HeapFree
MultiByteToWideChar
GetLongPathNameW
wininet
GetUrlCacheHeaderData
InternetSecurityProtocolToStringA
InternetLockRequestFile
InternetOpenUrlW
Sections
.text Size: 180KB - Virtual size: 179KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 28KB - Virtual size: 58KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 89KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ