Punsh
Static task
static1
Behavioral task
behavioral1
Sample
3b5da20c1a04ee07fe519a180c4343b9947b099fdfdc889f9f0e15d203ae1a6f.exe
Resource
win7-20220812-en
General
-
Target
3b5da20c1a04ee07fe519a180c4343b9947b099fdfdc889f9f0e15d203ae1a6f
-
Size
383KB
-
MD5
1f06e94d0fe50094a632018c625ff35b
-
SHA1
c1b0c111496158aa7630f5cebea2884f35ee8f57
-
SHA256
3b5da20c1a04ee07fe519a180c4343b9947b099fdfdc889f9f0e15d203ae1a6f
-
SHA512
4dd7624b0846061ff708d645a9ae95ccc133cf005a98f81050d6ffc8e578d8284a2c695b0f2718cea3b75dfb822dec7d2c84673aa68446950e319595b21e7407
-
SSDEEP
6144:ljx0Ssk2mAw93YPdHBpMGFm9Zi0w8LgnXYPToCKpDCSw7dXC6ALDq:px3sFmxyTFJ09snUoCKpDmVCo
Malware Config
Signatures
Files
-
3b5da20c1a04ee07fe519a180c4343b9947b099fdfdc889f9f0e15d203ae1a6f.exe windows x86
c7980e103f2c935dbc29ad4f3e09a493
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ReadFile
GetProcessHeap
SetEndOfFile
GetStringTypeW
CreateFileW
HeapReAlloc
HeapSize
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
FlushFileBuffers
CreateFileA
SetFilePointer
MultiByteToWideChar
LCMapStringW
GetPrivateProfileStringA
SetCurrentDirectoryA
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameA
InterlockedDecrement
GetCurrentThreadId
SetLastError
InterlockedIncrement
TlsFree
TlsSetValue
lstrcpyA
GetSystemTime
CloseHandle
GetVersionExA
ReleaseMutex
GetCurrentDirectoryA
CreateMutexA
GetSystemInfo
LocalAlloc
WriteConsoleW
TlsGetValue
TlsAlloc
Sleep
GetLastError
InterlockedExchange
HeapCreate
WaitForSingleObject
HeapAlloc
lstrlenA
GetNativeSystemInfo
GetSystemTimeAsFileTime
LoadLibraryW
HeapFree
DeleteFileA
GetProcAddress
GetModuleHandleW
ExitProcess
DecodePointer
GetCommandLineA
HeapSetInformation
GetStartupInfoW
RaiseException
SetStdHandle
EnterCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
GetFileType
WriteFile
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
IsProcessorFeaturePresent
GetStdHandle
GetModuleFileNameW
EncodePointer
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
RtlUnwind
DeleteCriticalSection
user32
MessageBoxA
CopyRect
SetDlgItemTextA
EndPaint
DestroyWindow
InvertRect
GetWindowRect
IsMenu
InsertMenuItemA
PostQuitMessage
SendDlgItemMessageA
FillRect
KillTimer
SetMenuItemBitmaps
DdeInitializeA
SetFocus
SendMessageA
SetClipboardViewer
GetWindowTextA
BeginPaint
InvalidateRect
GetWindowLongA
IsWindowUnicode
GetDlgItem
DefWindowProcA
GetSysColor
SetWindowPos
GetMenuItemInfoA
EnumWindowStationsW
CreatePopupMenu
AppendMenuA
GetSystemMetrics
SetWindowTextA
LoadImageA
SetMenuItemInfoA
gdi32
BitBlt
DeleteDC
StretchBlt
DeleteObject
SelectObject
CreateCompatibleDC
CombineRgn
CreateCompatibleBitmap
Ellipse
FillRgn
CreateRectRgn
GetObjectA
GetStockObject
CreateSolidBrush
CreateEllipticRgn
winspool.drv
EnumPrintersA
comdlg32
GetOpenFileNameA
advapi32
RegCloseKey
RegQueryInfoKeyA
RegOpenKeyExA
RegCreateKeyExA
RegEnumKeyExA
RegQueryValueExA
ole32
CoGetMalloc
oleaut32
OleCreateFontIndirect
Exports
Exports
Sections
.text Size: 235KB - Virtual size: 235KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 79KB - Virtual size: 79KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 57KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ