Static task
static1
Behavioral task
behavioral1
Sample
3f86666a70ccd2698e18bbbb789fcef7d3db504096fd3134c633a8b5e2e165a4.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
3f86666a70ccd2698e18bbbb789fcef7d3db504096fd3134c633a8b5e2e165a4.exe
Resource
win10v2004-20220812-en
General
-
Target
3f86666a70ccd2698e18bbbb789fcef7d3db504096fd3134c633a8b5e2e165a4
-
Size
211KB
-
MD5
7af57dfc76553dd2e0bc9b48c2e728a0
-
SHA1
53f1d32d2749f31471904b34287e8208aa287ab1
-
SHA256
3f86666a70ccd2698e18bbbb789fcef7d3db504096fd3134c633a8b5e2e165a4
-
SHA512
07f27253acfbd37edb168c808152a1f0999a7dacd783fbc1a083426a41f2877399a70a7d2acff31a675193a64d2d12461a130b6ae24656e12d4fb506ff478a3f
-
SSDEEP
3072:N444hdZok8OGP2A9VnNMp2IvTnh6SeMyMedwE6NQHTGarwRqAQWB:Nt4hISGP2qVnNMvntCdMrarQqAd
Malware Config
Signatures
Files
-
3f86666a70ccd2698e18bbbb789fcef7d3db504096fd3134c633a8b5e2e165a4.exe windows x86
3648bb3e281617afa259e3aaa206f029
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CompareFileTime
CopyFileA
CreateFileA
CreateFileW
FileTimeToDosDateTime
FindClose
FreeEnvironmentStringsA
GetEnvironmentStringsW
GetEnvironmentVariableA
GetFileSize
GetModuleHandleA
GetSystemDefaultLCID
GetUserDefaultLangID
GlobalReAlloc
HeapDestroy
HeapSize
InitializeCriticalSection
LoadLibraryA
MoveFileA
OpenProcess
ResetEvent
SetErrorMode
SetHandleCount
SetLastError
TlsGetValue
VirtualAlloc
WideCharToMultiByte
lstrlenA
gdi32
AbortDoc
CreateRectRgn
EndDoc
EnumFontFamiliesW
FillRgn
GetEnhMetaFileDescriptionA
GetTextExtentPointW
OffsetRgn
OffsetViewportOrgEx
PolylineTo
RectVisible
SelectClipRgn
SetWindowExtEx
shell32
DragAcceptFiles
DragQueryPoint
FindExecutableW
SHBrowseForFolderW
SHCreateDirectoryExW
SHGetPathFromIDListW
SHGetSettings
user32
BeginPaint
CallWindowProcA
CreateMenu
DrawMenuBar
EnableWindow
EndDialog
GetFocus
GetKeyboardType
InvalidateRect
IsWindowVisible
LoadStringA
RegisterWindowMessageA
RemoveMenu
SetRect
SetScrollPos
Sections
.text Size: 88KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 99KB - Virtual size: 98KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
1J7t0bBw Size: 2KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE