Static task
static1
Behavioral task
behavioral1
Sample
3b57fb580b389daee234326474e75fd0cb39673eecca3340de196b7c79433c38.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
3b57fb580b389daee234326474e75fd0cb39673eecca3340de196b7c79433c38.exe
Resource
win10v2004-20220901-en
General
-
Target
3b57fb580b389daee234326474e75fd0cb39673eecca3340de196b7c79433c38
-
Size
239KB
-
MD5
0a8b5286c47bb815a8603a945ccca9c0
-
SHA1
a5d13717fb1620c8ef418098dad1756cde2f15f4
-
SHA256
3b57fb580b389daee234326474e75fd0cb39673eecca3340de196b7c79433c38
-
SHA512
cfc1ffe1cda3911a073df8c6fa95b8562df29c39d7b9f73729db960c805eedbf78a6325be07d98d6ae5f1a1717ddb03c97b729977977ed2b73908484794cd4ff
-
SSDEEP
6144:jH87ZQIaZPSO543ymxYEAw3fQdoXYEXSsQLH5A0:LZkzY1C4doIEXSsP0
Malware Config
Signatures
Files
-
3b57fb580b389daee234326474e75fd0cb39673eecca3340de196b7c79433c38.exe windows x86
5bbdf4361b3ae25b0869cfb669752dd9
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
SetRect
GetWindowRect
GetDesktopWindow
GetSystemMetrics
RegisterClassExW
LoadIconW
DefWindowProcW
PostQuitMessage
DestroyWindow
KillTimer
SetTimer
SetWindowLongA
CreateWindowExA
RegisterClassA
LoadCursorA
SetFocus
IsWindowVisible
GetKeyState
SendMessageA
GetClientRect
GetWindowLongA
DefWindowProcA
EndPaint
BeginPaint
AdjustWindowRect
CreateWindowExW
DispatchMessageW
TranslateMessage
GetMessageW
ShowWindow
UpdateWindow
ShowCursor
MessageBoxA
kernel32
OutputDebugStringA
MultiByteToWideChar
WideCharToMultiByte
lstrlenW
GetModuleHandleW
Sleep
GetProcAddress
ExitProcess
GetCommandLineA
GetStartupInfoA
RtlUnwind
GetLastError
HeapFree
RaiseException
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
WriteFile
GetStdHandle
GetModuleFileNameA
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
LoadLibraryA
InitializeCriticalSectionAndSpinCount
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapAlloc
VirtualAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
HeapSize
gdi32
GetStockObject
ole32
OleInitialize
OleUninitialize
CoCreateInstance
oleaut32
SysAllocStringLen
VariantInit
SafeArrayCreate
VariantClear
SafeArrayDestroy
SysFreeString
SysAllocString
Sections
.text Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 175KB - Virtual size: 174KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ