Static task
static1
Behavioral task
behavioral1
Sample
3c32a9517e0ca8092e3ca4f0f1d0f8e2e23ac3ae0d7c1613be0723d0591998df.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
3c32a9517e0ca8092e3ca4f0f1d0f8e2e23ac3ae0d7c1613be0723d0591998df.exe
Resource
win10v2004-20221111-en
General
-
Target
3c32a9517e0ca8092e3ca4f0f1d0f8e2e23ac3ae0d7c1613be0723d0591998df
-
Size
688KB
-
MD5
14f07df673384b69cf2be3b22c8ffa01
-
SHA1
0004238289ff4c3bcccd02fe9e5f261e286eb719
-
SHA256
3c32a9517e0ca8092e3ca4f0f1d0f8e2e23ac3ae0d7c1613be0723d0591998df
-
SHA512
eb0bf9a4e548a453ad976ebbf3977969c82319c6c77e80561999618de2eab297b2116c37c62440f310b692f034ad3fc3a3eef8e7e6ba6aa3ee550cf6caa2f7ff
-
SSDEEP
12288:7s4ulzbJMF1nVEyO0w6YVzonayF9wNPnEhFRH/pQYS9sixN/PBvt7o2kJUKh:7yJMPukw6gfyF+NshFTg7nBvJkJTh
Malware Config
Signatures
Files
-
3c32a9517e0ca8092e3ca4f0f1d0f8e2e23ac3ae0d7c1613be0723d0591998df.exe windows x86
0e9b271e029ce4769bcab18019037e4c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
DdeAccessData
DdeQueryConvInfo
IsZoomed
UnhookWindowsHook
GetCursor
OpenInputDesktop
DdeCreateStringHandleW
EnumDisplaySettingsExA
MapVirtualKeyExA
MapDialogRect
DispatchMessageA
ShowCaret
DdeGetData
GetMenuDefaultItem
RegisterClassA
EnumWindows
SetCursor
ReleaseCapture
PostQuitMessage
SetClipboardViewer
CreateDialogParamA
DestroyMenu
SetWindowWord
DdeQueryNextServer
GetMenuStringW
MessageBeep
SetMessageExtraInfo
GetKeyNameTextW
BlockInput
GetMenuItemRect
AdjustWindowRectEx
RegisterClassExA
CreateWindowExW
UnionRect
ChangeDisplaySettingsW
GetClientRect
UnregisterClassW
LoadBitmapA
CharLowerBuffW
SetWindowPlacement
CreateMenu
MessageBoxA
EnumWindowStationsW
EndTask
CharLowerA
WINNLSEnableIME
GetThreadDesktop
DragObject
GetMenuState
kernel32
SetHandleCount
SetWaitableTimer
QueryPerformanceCounter
MultiByteToWideChar
GetThreadContext
VirtualAlloc
GetSystemInfo
IsBadWritePtr
GetSystemTimeAsFileTime
SetLastError
SetStdHandle
GetCurrentThreadId
OpenMutexA
GetUserDefaultLCID
HeapDestroy
GetCommandLineW
TlsSetValue
CompareStringW
lstrcpyW
TlsFree
GetModuleFileNameW
GetLocaleInfoW
GetOEMCP
GetModuleHandleA
ExitProcess
GetVersionExA
RtlUnwind
GetStringTypeW
WideCharToMultiByte
GetCommandLineA
CompareStringA
CloseHandle
HeapFree
GetTimeFormatA
GetDateFormatA
IsValidLocale
GetModuleFileNameA
GetDiskFreeSpaceExW
DeleteCriticalSection
LeaveCriticalSection
GetStartupInfoW
GetFileType
ReadFile
VirtualFree
CreateMutexA
GetDiskFreeSpaceW
TerminateProcess
HeapCreate
GetStringTypeA
GetProcAddress
VirtualQuery
GetCurrentProcess
WriteFileEx
HeapAlloc
FlushFileBuffers
GetCurrentThread
InterlockedExchange
TlsGetValue
InitializeCriticalSection
EnterCriticalSection
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetACP
FreeEnvironmentStringsW
HeapSize
SetFilePointer
GetCurrentProcessId
LoadLibraryA
GetStartupInfoA
GetLastError
EnumSystemLocalesA
GetCPInfo
WriteFile
TlsAlloc
GetLocaleInfoA
VirtualProtect
GetEnvironmentStringsW
HeapReAlloc
IsValidCodePage
GetTickCount
GetStdHandle
LCMapStringA
GetDriveTypeW
SetEnvironmentVariableA
LCMapStringW
GetTimeZoneInformation
GetEnvironmentStrings
comctl32
ImageList_DragLeave
ImageList_BeginDrag
ImageList_SetBkColor
ImageList_GetBkColor
ImageList_LoadImageA
ImageList_SetDragCursorImage
DrawStatusTextA
CreateStatusWindowW
ImageList_Read
ImageList_DragShowNolock
ImageList_SetFlags
ImageList_GetDragImage
ImageList_Replace
ImageList_SetFilter
ImageList_Destroy
InitCommonControlsEx
Sections
.text Size: 91KB - Virtual size: 90KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 446KB - Virtual size: 446KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 134KB - Virtual size: 134KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ