Static task
static1
Behavioral task
behavioral1
Sample
3600e879476e7564c7155abf9c00589fe02402433234c6a76f0adf08d76c6e6d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
3600e879476e7564c7155abf9c00589fe02402433234c6a76f0adf08d76c6e6d.exe
Resource
win10v2004-20220901-en
General
-
Target
3600e879476e7564c7155abf9c00589fe02402433234c6a76f0adf08d76c6e6d
-
Size
193KB
-
MD5
a2dfde1c938dd9770be1a8b223f1c05f
-
SHA1
0188081b817c0ab907f48144680bb7e0023c60da
-
SHA256
3600e879476e7564c7155abf9c00589fe02402433234c6a76f0adf08d76c6e6d
-
SHA512
b0242a3c0aa5065611cbfa76206858eda1f3b7f8fb06e3e427f010cab7b994f09a0cb35e1c5cafd6e3b999075d8e7641c38eef5ef777cfcbee0dc1cc448ea097
-
SSDEEP
6144:pT58gPhnhbmwrBt6ze+Rbr7O8/AvQfbjh2LFp/:pTygjTbE0Ifbjoz/
Malware Config
Signatures
Files
-
3600e879476e7564c7155abf9c00589fe02402433234c6a76f0adf08d76c6e6d.exe windows x86
4023b76a08359f8f89ffef358c247778
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
advapi32
RegCloseKey
RegCreateKeyA
RegCreateKeyExW
RegOpenKeyW
RegQueryValueExA
RegSetValueA
RegSetValueExW
RegSetValueW
kernel32
AddAtomA
CloseHandle
ConvertThreadToFiber
ExitProcess
FindAtomA
GetAtomNameA
SetUnhandledExceptionFilter
TlsAlloc
TlsFree
TlsSetValue
msvcrt
__getmainargs
__p__environ
__p__fmode
__set_app_type
_assert
_cexit
_iob
_onexit
_setmode
abort
atexit
free
malloc
memcpy
memset
signal
strcpy
strlen
wcscpy
user32
AdjustWindowRectEx
AppendMenuW
BeginPaint
CallWindowProcW
CheckMenuItem
ClientToScreen
CloseClipboard
CreateMenu
CreatePopupMenu
DefFrameProcW
DefWindowProcW
DestroyMenu
DestroyWindow
DrawFocusRect
DrawFrameControl
EnableWindow
EnumClipboardFormats
GetCapture
GetClassNameW
GetClipboardData
GetClipboardFormatNameW
GetCursorPos
GetDesktopWindow
GetDlgItem
GetForegroundWindow
GetMenuItemCount
GetMenuItemInfoW
GetMessageW
GetSystemMetrics
GetWindow
GetWindowTextLengthW
GetWindowThreadProcessId
InsertMenuItemW
InvalidateRect
IsIconic
IsZoomed
KillTimer
LoadCursorFromFileW
LoadCursorW
LoadIconW
LoadImageW
MapWindowPoints
MessageBeep
MessageBoxW
PeekMessageW
PostQuitMessage
RegisterClassW
RegisterHotKey
ReleaseCapture
ReleaseDC
SendMessageW
SetCapture
SetCursor
SetCursorPos
SetForegroundWindow
SetParent
SetTimer
SetWindowLongW
SetWindowRgn
SetWindowTextW
ShowCursor
ShowWindow
SystemParametersInfoW
TrackPopupMenu
TranslateMessage
UnhookWindowsHookEx
UnregisterHotKey
UpdateWindow
WindowFromPoint
Sections
.text Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 76B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 976B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 34KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ