Static task
static1
Behavioral task
behavioral1
Sample
038c15434e90749236c3f691621140b1ddc823307fc9f1e3d19de965cd0358ee.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
038c15434e90749236c3f691621140b1ddc823307fc9f1e3d19de965cd0358ee.exe
Resource
win10v2004-20220812-en
General
-
Target
038c15434e90749236c3f691621140b1ddc823307fc9f1e3d19de965cd0358ee
-
Size
855KB
-
MD5
201d19bbbb6c2e9f4bab82ac87ffa3a5
-
SHA1
260917a16824ac9b0e62664a4a3eecff1991052f
-
SHA256
038c15434e90749236c3f691621140b1ddc823307fc9f1e3d19de965cd0358ee
-
SHA512
6872b78ba4e2da682c2db6412fc62b10118d1b38dacb3d70e213a7faadc0422833ff8a217282d7bf51d9f8c571967097f34f1ea9da7cd5d2db44ceb73fa13964
-
SSDEEP
12288:pHrUaP98IoZG3Sulupc/omdxRYdSkR0/kjG4FvlU9rlz0OW4uWYvpEC:trUaPRluWoA/kYT4YZIZ
Malware Config
Signatures
Files
-
038c15434e90749236c3f691621140b1ddc823307fc9f1e3d19de965cd0358ee.exe windows x86
a1e6c0f83ad84f7f57be6c26da6318a9
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
snmpapi
SnmpUtilOidCmp
SnmpUtilIdsToA
SnmpUtilPrintOid
SnmpUtilMemFree
SnmpUtilVarBindFree
SnmpUtilPrintAsnAny
SnmpUtilVarBindListFree
SnmpUtilMemReAlloc
SnmpUtilOctetsNCmp
SnmpUtilOctetsFree
SnmpUtilAnsiToUnicode
SnmpSvcGetUptimeFromTime
SnmpUtilOctetsCmp
SnmpUtilUTF8ToUnicode
SnmpUtilAsnAnyFree
SnmpUtilUnicodeToAnsi
SnmpUtilOidToA
SnmpUtilMemAlloc
SnmpUtilOidAppend
SnmpUtilUnicodeToUTF8
SnmpTfxClose
SnmpSvcSetLogType
msdart
?ReadOrWriteLock@CFakeLock@@QAE_NXZ
?IsReadLocked@CLKRLinearHashTable@@QBE_NXZ
?ValidSignature@CLKRLinearHashTable@@QBE_NXZ
?SetDefaultSpinCount@CReaderWriterLock@@SGXG@Z
?ConvertExclusiveToShared@CLKRLinearHashTable@@QBEXXZ
?IsReadUnlocked@CReaderWriterLock@@QBE_NXZ
?_ReadLockSpin@CReaderWriterLock2@@AAEXXZ
?ConvertExclusiveToShared@CReaderWriterLock3@@QAEXXZ
?_BucketAddress@CLKRLinearHashTable@@ABEKK@Z
?WriteLock@CReaderWriterLock3@@QAEXXZ
?GetDefaultSpinCount@CReaderWriterLock2@@SGGXZ
mpCalloc
?GetSpinCount@CSmallSpinLock@@QBEGXZ
?TryReadLock@CFakeLock@@QAE_NXZ
?IsEmpty@CDoubleList@@QBE_NXZ
?sm_dblDfltSpinAdjFctr@CReaderWriterLock@@1NA
?IsWin95@CMdVersionInfo@@SAHXZ
MPCSUninitialize
?ReadUnlock@CReaderWriterLock2@@QAEXXZ
?_TryReadLock@CReaderWriterLock@@AAE_NXZ
?_LockSpin@CSpinLock@@AAEXXZ
?BucketIndex@CLKRHashTableStats@@SGJJ@Z
?TryReadLock@CSpinLock@@QAE_NXZ
kernel32
WriteProcessMemory
CancelIo
GetOEMCP
GetEnvironmentVariableW
RemoveDirectoryW
GetStringTypeExA
ConvertFiberToThread
EnumResourceLanguagesW
GetTickCount
RegisterConsoleIME
LoadLibraryW
HeapCreate
GlobalReAlloc
CreateFileMappingA
OpenWaitableTimerW
_hwrite
OpenFile
oleaut32
VarBoolFromCy
VarUI2FromBool
OleSavePictureFile
VarBstrFromCy
SafeArrayCreateVector
VarUI2FromI4
VarDecFromUI4
VarDateFromR4
VarCyMulI4
VarAbs
VarI1FromUI2
VarI8FromR4
VectorFromBstr
OleLoadPictureEx
VarDecDiv
DispGetParam
VarDecFromUI2
VarI8FromDec
VarI8FromCy
VarI1FromI2
VarUI1FromI1
VarUI1FromDec
softpub
SoftpubLoadSignature
OpenPersonalTrustDBDialog
DriverCleanupPolicy
DriverInitializePolicy
SoftpubInitialize
OfficeCleanupPolicy
SoftpubCleanup
HTTPSFinalProv
FindCertsByIssuer
SoftpubCheckCert
GenericChainCertificateTrust
DriverFinalPolicy
SoftpubDefCertInit
OfficeInitializePolicy
SoftpubLoadDefUsageCallData
GenericChainFinalProv
SoftpubAuthenticode
SoftpubFreeDefUsageCallData
SoftpubDumpStructure
SoftpubLoadMessage
HTTPSCertificateTrust
AddPersonalTrustDBPages
sxs
SxsEndAssemblyInstall
SxsProbeAssemblyInstallation
CreateAssemblyNameObject
SxsBeginAssemblyInstall
SxsRunDllInstallAssemblyW
SxsGenerateActivationContext
SxspGenerateManifestPathOnAssemblyIdentity
SxsQueryManifestInformation
SxsInstallW
CreateAssemblyCache
SxsUninstallW
SxsOleAut32RedirectTypeLibrary
SxsOleAut32MapReferenceClsidToConfiguredClsid
SxsRunDllInstallAssembly
sqlunirl
_CreateFont@56
_FatalAppExit_@8
_PrintDlg_@4
_ChangeDisplaySettings_@8
_RegEnumKey_@16
_CharToOem_@8
_GetFileAttributes_@4
__lcreat_@8
_AddAtom_@4
_LoadMenu@8
_MAKEINTRESOURCE@4
_EnumResourceNames_@16
_CreateIC_@16
_OemToCharBuff_@12
_DeviceCapabilities_@20
_SetICMProfile_@8
_DlgDirListComboBox_@20
_OpenWindowStation_@12
_LoadBitmap@8
_NDdeTrustedShareEnum_@24
_CreateScalableFontResource_@16
user32
GetRawInputDeviceInfoA
SetCaretPos
RegisterServicesProcess
GetWindowTextLengthW
OpenDesktopW
DrawFocusRect
VkKeyScanA
CreateMDIWindowW
BroadcastSystemMessageA
SendInput
TabbedTextOutW
GetWindowRgnBox
AlignRects
ReleaseDC
DragDetect
EndDeferWindowPos
WINNLSEnableIME
InternalGetWindowText
AllowForegroundActivation
GetKBCodePage
ScrollWindowEx
IsChild
IsZoomed
SendNotifyMessageA
GetCaretPos
DialogBoxIndirectParamAorW
WinHelpW
GetInternalWindowPos
Sections
.text Size: 399KB - Virtual size: 398KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 139KB - Virtual size: 139KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 181KB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 108KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 26KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE