Static task
static1
Behavioral task
behavioral1
Sample
f3773764307cad8af08519db29b490124aa1f068a5e5373b7aaf56c7fe8f8793.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
f3773764307cad8af08519db29b490124aa1f068a5e5373b7aaf56c7fe8f8793.exe
Resource
win10v2004-20220812-en
General
-
Target
f3773764307cad8af08519db29b490124aa1f068a5e5373b7aaf56c7fe8f8793
-
Size
129KB
-
MD5
03d41f944eea9c4be5f5e34a74f03462
-
SHA1
62db6704a6a32389b17be46552f6d2cab26363ad
-
SHA256
f3773764307cad8af08519db29b490124aa1f068a5e5373b7aaf56c7fe8f8793
-
SHA512
e12dfbfd437e29852b1ef819c80f98a19889231cacbba6d91a17021defede6869651b4353775f56362e1478295fe5afb978e98a4b1796e06f288cc4a18e8e833
-
SSDEEP
1536:vVGjzh5sgpfH+x3M+qcH0BFvfE0ed0oINLKRy2MJ1y095aRPKpelqVjbQne8RnXa:Sh5/5wM+qcW6aERyHPQ7l9RXH9w5bd
Malware Config
Signatures
Files
-
f3773764307cad8af08519db29b490124aa1f068a5e5373b7aaf56c7fe8f8793.exe windows x86
5b9747e2779082bfd8227cd2b4ad7c11
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ole32
CoBuildVersion
kernel32
SetCurrentDirectoryW
GetStartupInfoA
GlobalSize
GetModuleFileNameW
UnlockFile
GlobalFindAtomW
RtlUnwind
FormatMessageA
CreateSemaphoreA
GetUserDefaultLangID
SearchPathA
FlushFileBuffers
GetFileAttributesExA
MulDiv
FindResourceA
GetFileAttributesW
FindFirstChangeNotificationW
WriteProfileSectionA
VirtualProtect
HeapWalk
ReleaseSemaphore
SetLocalTime
GetNumberFormatW
SetFilePointer
GetSystemWindowsDirectoryW
InitializeCriticalSection
GetSystemDefaultUILanguage
GetLastError
GlobalReAlloc
lstrlenW
MultiByteToWideChar
FileTimeToDosDateTime
GlobalFree
SystemTimeToFileTime
GlobalMemoryStatusEx
QueryDosDeviceW
ConnectNamedPipe
MoveFileA
IsBadCodePtr
CreateNamedPipeW
GetHandleInformation
FlushViewOfFile
GetTempFileNameA
GetComputerNameA
RaiseException
CreateMutexW
Sleep
SetFileAttributesA
DeleteAtom
SetErrorMode
FindCloseChangeNotification
UnmapViewOfFile
lstrcmpiA
CreateRemoteThread
SetLastError
LoadLibraryW
lstrlenA
GetSystemInfo
FindResourceExA
VerSetConditionMask
GetTempFileNameW
GetCurrentDirectoryW
SetEvent
GetCommProperties
PulseEvent
GlobalFlags
SetPriorityClass
CreateDirectoryW
SleepEx
SetThreadExecutionState
GetProcAddress
lstrcatW
CancelIo
ExitThread
GlobalGetAtomNameA
GetAtomNameA
SetCurrentDirectoryA
SetCommBreak
GetComputerNameExW
TransactNamedPipe
GetDateFormatW
lstrcmpW
LoadResource
SetMailslotInfo
TlsFree
OpenEventA
SetUnhandledExceptionFilter
EnumResourceTypesA
SuspendThread
SetFileTime
LocalLock
GetModuleHandleA
SetFileApisToOEM
DeleteCriticalSection
ClearCommBreak
EnterCriticalSection
FindNextFileA
LoadLibraryA
GetSystemTime
CreateThread
CreateFileMappingW
shlwapi
ord29
IsCharSpaceA
gdi32
EndPage
GetMapMode
ScaleWindowExtEx
RealizePalette
GetTextAlign
CreatePolygonRgn
EndPath
CreateFontW
GetMetaFileW
GetGlyphIndicesA
EnumFontFamiliesW
SetViewportOrgEx
SetWindowExtEx
DeleteObject
CreatePen
GetTextMetricsW
ExtTextOutW
EnumFontFamiliesExW
CreateRectRgnIndirect
GetTextExtentPoint32W
Rectangle
StartPage
UnrealizeObject
IntersectClipRect
SetTextColor
SetPixel
StretchDIBits
DeleteDC
SetTextAlign
SetBkMode
SetWindowOrgEx
GetTextExtentPointA
ExcludeClipRect
GetROP2
CreateCompatibleDC
LPtoDP
SaveDC
EndDoc
CreateICW
CreateDCW
GetTextCharsetInfo
LineDDA
SetAbortProc
AddFontResourceW
Ellipse
TextOutA
GetFontData
CreatePenIndirect
GetTextExtentPoint32A
SetDIBits
SetBitmapDimensionEx
CreateBrushIndirect
GetDIBits
CreateSolidBrush
SetDIBColorTable
GetClipBox
ResizePalette
LineTo
CreateBitmap
CreateRoundRectRgn
Polygon
GetCharWidth32W
GetLayout
GetCurrentObject
OffsetViewportOrgEx
PtVisible
SetROP2
EnumFontsW
GetWindowOrgEx
Escape
GetTextFaceW
TranslateCharsetInfo
SelectObject
GetNearestPaletteIndex
GetNearestColor
PolyBezier
oleacc
GetStateTextA
Sections
.text Size: 24KB - Virtual size: 31KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.ars Size: 512B - Virtual size: 96B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.Pits Size: 512B - Virtual size: 28B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.onno Size: 512B - Virtual size: 63B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.loHeal Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pug Size: 1024B - Virtual size: 658B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.taeit Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.Roam Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 66KB - Virtual size: 65KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ