Static task
static1
Behavioral task
behavioral1
Sample
3c5c97324f99b29332fcedc6cfa76c60cc6ccbfa66827f100ccca94323f50dfd.exe
Resource
win7-20220812-en
General
-
Target
3c5c97324f99b29332fcedc6cfa76c60cc6ccbfa66827f100ccca94323f50dfd
-
Size
194KB
-
MD5
938af3472753211f517e0f709ec18420
-
SHA1
9d762bd6ab37ab69062d971a9de71b07d99c5fff
-
SHA256
3c5c97324f99b29332fcedc6cfa76c60cc6ccbfa66827f100ccca94323f50dfd
-
SHA512
d62aa607dd6a5d77b4d7d1d85a86d98b91a5c38e6be9cf1504682d74ea4026dce07b641dbc450d1d8cccefde8b4954e49cffae6b3fe9244d37b0bb229893d19a
-
SSDEEP
3072:Dzwun1YbCdoJcBkmUWBMjM5ZXhvfTB1ds/N0/1SOrrkJEWOauwSq:HwSCbbcBaWBLtfrdfSOrgJHOXrq
Malware Config
Signatures
Files
-
3c5c97324f99b29332fcedc6cfa76c60cc6ccbfa66827f100ccca94323f50dfd.exe windows x86
e6ceb87f2354634ca87834f547084a94
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
setupapi
CM_Get_Parent
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInfo
SetupDiGetDeviceInstanceIdW
CM_Get_Res_Des_Data_Size
CM_Get_Res_Des_Data
SetupDiEnumDeviceInterfaces
CM_Get_Device_IDW
CM_Get_Next_Res_Des
CM_Get_DevNode_Status
SetupDiGetDeviceRegistryPropertyW
CM_Get_First_Log_Conf
CM_Free_Res_Des_Handle
SetupDiGetDeviceInterfaceDetailW
SetupDiGetClassDevsW
winmm
timeBeginPeriod
timeEndPeriod
kernel32
FlushFileBuffers
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
LoadLibraryA
DeviceIoControl
SizeofResource
GetLastError
CreateFileW
FindResourceExW
FindResourceW
CloseHandle
LoadResource
LockResource
InterlockedDecrement
RaiseException
CreateEventW
WaitForSingleObject
SetEvent
CreateThread
WaitForMultipleObjects
InitializeCriticalSection
DeleteCriticalSection
CreateWaitableTimerW
LeaveCriticalSection
Sleep
LocalAlloc
SetWaitableTimer
EnterCriticalSection
LocalFree
lstrlenA
GetCurrentProcessId
GetSystemTimeAsFileTime
GetExitCodeThread
GetProcessHeap
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
GetConsoleMode
GetConsoleCP
SetFilePointer
GetTickCount
QueryPerformanceCounter
GetStartupInfoA
GetFileType
SetHandleCount
GetCommandLineW
GetCommandLineA
GetEnvironmentStringsW
GetVersionExA
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
FreeEnvironmentStringsW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
InterlockedIncrement
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleA
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
MultiByteToWideChar
LCMapStringA
WideCharToMultiByte
LCMapStringW
HeapCreate
VirtualFree
VirtualAlloc
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
GetModuleFileNameW
FreeEnvironmentStringsA
GetEnvironmentStrings
RtlUnwind
user32
UnregisterDeviceNotification
RegisterDeviceNotificationW
UnregisterClassA
advapi32
RegisterServiceCtrlHandlerExW
StartServiceCtrlDispatcherW
RegOpenKeyExW
RegCloseKey
RegQueryValueExW
SetServiceStatus
ole32
CoCreateInstance
CoInitializeSecurity
CoSetProxyBlanket
CoUninitialize
StringFromGUID2
CoInitializeEx
CoInitialize
oleaut32
SysFreeString
SafeArrayAccessData
VariantInit
SafeArrayUnaccessData
VariantClear
SysAllocString
VariantChangeType
Sections
.text Size: 88KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 8KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.erdata Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE