Static task
static1
Behavioral task
behavioral1
Sample
3fabb629c2598e818cf4726227c668007bf875fe2bd3cc14b3834f925ecb3f7e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
3fabb629c2598e818cf4726227c668007bf875fe2bd3cc14b3834f925ecb3f7e.exe
Resource
win10v2004-20220812-en
General
-
Target
3fabb629c2598e818cf4726227c668007bf875fe2bd3cc14b3834f925ecb3f7e
-
Size
186KB
-
MD5
cc6b3b81f9cff41486817ac43315f754
-
SHA1
043b4fa6b9d1fdd1affe237094e3ef13b8d19148
-
SHA256
3fabb629c2598e818cf4726227c668007bf875fe2bd3cc14b3834f925ecb3f7e
-
SHA512
5422bf20713ea4f24696b61d34060f799e7a46d970edb7cb95e650d0aaf4f0245d9638ca8583223136165ff6f4f67650faf6f75197e5b8eb40a136ff50644c66
-
SSDEEP
3072:drD+vaYGHzfrQRofnXts5vMliodYY5qYYYYYYar9h35OBJ+E:dryBGTzQR84vMnX5OBn
Malware Config
Signatures
Files
-
3fabb629c2598e818cf4726227c668007bf875fe2bd3cc14b3834f925ecb3f7e.exe windows x86
36066ddf8086baa06e4b4831c0517ae0
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_NO_BIND
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_UP_SYSTEM_ONLY
Imports
kernel32
WriteConsoleW
SetStdHandle
LoadLibraryW
RtlUnwind
Sleep
IsValidCodePage
GetOEMCP
GetACP
MultiByteToWideChar
GetConsoleMode
GetConsoleCP
SetFilePointer
GetSystemTimeAsFileTime
GetCurrentProcessId
GetProcessHeap
QueryPerformanceCounter
InterlockedDecrement
GetCurrentThreadId
SetLastError
InterlockedIncrement
TlsFree
LCMapStringW
GetStringTypeW
HeapReAlloc
FlushFileBuffers
HeapSize
CreateFileW
CloseHandle
lstrcpyA
LocalFree
FindFirstChangeNotificationA
FindNextChangeNotification
LocalAlloc
GetPrivateProfileStringA
GetLastError
HeapCreate
GetCPInfo
GlobalAlloc
FindCloseChangeNotification
WaitForSingleObject
HeapFree
HeapAlloc
TlsSetValue
TlsGetValue
TlsAlloc
DeleteCriticalSection
GetFileType
InitializeCriticalSectionAndSpinCount
SetHandleCount
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetModuleFileNameA
GetTickCount
lstrlenA
GetModuleFileNameW
GetStdHandle
WriteFile
ExitProcess
GetCommandLineA
HeapSetInformation
GetStartupInfoW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
DecodePointer
EncodePointer
EnterCriticalSection
LeaveCriticalSection
GetProcAddress
GetModuleHandleW
user32
SetClipboardData
UpdateWindow
MoveWindow
SetDlgItemTextA
EndPaint
CloseClipboard
GetWindowRect
SendDlgItemMessageA
GetWindowDC
CopyImage
GetFocus
wsprintfA
GetClientRect
LoadImageA
SendMessageA
BeginPaint
EnumWindows
GetDC
OffsetRect
GetWindowTextA
ReleaseDC
EmptyClipboard
GetDlgItem
EndDialog
SetWindowPos
CheckDlgButton
ShowWindow
AppendMenuA
IsWindow
SystemParametersInfoA
DdeNameService
RegisterClipboardFormatW
SetWindowTextA
GetWindow
gdi32
BitBlt
PatBlt
Pie
GetTextExtentPoint32A
LineTo
SetTextColor
DeleteDC
CreateFontIndirectA
SetBkColor
DeleteObject
SelectObject
CreateCompatibleDC
CreateCompatibleBitmap
SaveDC
CreatePen
GetTextMetricsA
SetTextAlign
GetObjectA
GetStockObject
RestoreDC
CreateSolidBrush
MoveToEx
advapi32
GetTokenInformation
GetUserNameW
ConvertSidToStringSidA
shell32
SHGetFolderPathA
ole32
CoInitialize
CoGetObject
CoUninitialize
oleaut32
VariantChangeType
VariantClear
netapi32
NetUserGetInfo
NetApiBufferFree
comctl32
InitCommonControlsEx
oleacc
GetRoleTextA
wsnmp32
ord320
Sections
.text Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 18KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 104KB - Virtual size: 103KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ