Static task
static1
Behavioral task
behavioral1
Sample
3677680adcc2869998742e78c1dc252db8ae2874fa24bd5f707e23a088ff9b8e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
3677680adcc2869998742e78c1dc252db8ae2874fa24bd5f707e23a088ff9b8e.exe
Resource
win10v2004-20220812-en
General
-
Target
3677680adcc2869998742e78c1dc252db8ae2874fa24bd5f707e23a088ff9b8e
-
Size
114KB
-
MD5
0e52d9b6c95bb3cdcb595a69f9ce7e10
-
SHA1
b12a528a033fd5dd80300925e91c8339c4826b34
-
SHA256
3677680adcc2869998742e78c1dc252db8ae2874fa24bd5f707e23a088ff9b8e
-
SHA512
061a874decfb06123d0e4398d4e790de5caeb6f788a73319c530248c580cc972a5e0664abe32d4bf2510193a9d27cb52680a220c912e0a90875aaf6255ba9e35
-
SSDEEP
1536:PJNJWVhdcFLSV0Ka+BhIF1Aktwxh94VsgSziuJz8jcojq8IMqJGuWocYRF/0WtS8:Uh9j5BuFkx07jzjq8fqLWoc0/7wH1
Malware Config
Signatures
Files
-
3677680adcc2869998742e78c1dc252db8ae2874fa24bd5f707e23a088ff9b8e.exe windows x86
3369686e4c7e34390e6d4763f79a86d9
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
GetTraceEnableFlags
GetTraceEnableLevel
GetTraceLoggerHandle
RegisterTraceGuidsW
UnregisterTraceGuids
TraceMessage
kernel32
ExpandEnvironmentStringsW
GetLastError
CloseHandle
ReleaseMutex
CreateMutexW
Sleep
InterlockedCompareExchange
GetStartupInfoA
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetModuleHandleA
InterlockedExchange
user32
PostQuitMessage
DefWindowProcW
RegisterWindowMessageW
RegisterClassExW
LoadCursorW
LoadIconW
CreateWindowExW
LoadStringW
UnregisterClassW
DispatchMessageW
GetMessageW
LoadImageW
DestroyIcon
SetTimer
SetMenuItemInfoW
LoadMenuW
PostMessageW
TrackPopupMenuEx
GetSubMenu
SetForegroundWindow
GetCursorPos
KillTimer
TranslateMessage
DestroyMenu
msvcrt
??3@YAXPAX@Z
memset
??2@YAPAXI@Z
??_V@YAXPAX@Z
memcpy_s
??_U@YAPAXI@Z
__getmainargs
_cexit
_exit
_XcptFilter
_ismbblead
exit
_controlfp
_except_handler4_common
?terminate@@YAXXZ
__set_app_type
__p__fmode
__p__commode
__setusermatherr
_initterm
_acmdln
_amsg_exit
wevtapi
EvtCreateRenderContext
EvtRender
EvtClose
EvtSubscribe
shell32
ShellExecuteW
Shell_NotifyIconW
ntdll
WinSqmAddToStream
ole32
CoCreateInstance
CoTaskMemFree
CoUninitialize
CoInitialize
CoTaskMemAlloc
setupapi
SetupDiEnumDeviceInterfaces
SetupDiGetClassDevsExW
SetupDiGetDeviceInterfaceDetailW
SetupDiDestroyDeviceInfoList
Sections
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 992B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 28KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
nvvmuoa Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE