Static task
static1
Behavioral task
behavioral1
Sample
3e353e37d82e483d6d6e0c033c3f1d6f825ce691b68ca9057082b7ac36892498.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
3e353e37d82e483d6d6e0c033c3f1d6f825ce691b68ca9057082b7ac36892498.exe
Resource
win10v2004-20220901-en
General
-
Target
3e353e37d82e483d6d6e0c033c3f1d6f825ce691b68ca9057082b7ac36892498
-
Size
64KB
-
MD5
2005119fc004f1f548ee2d3213140d4c
-
SHA1
89e2cd931dd0a3cd9a73b19883789a8b40f18f74
-
SHA256
3e353e37d82e483d6d6e0c033c3f1d6f825ce691b68ca9057082b7ac36892498
-
SHA512
91cb756e781f89125ea450d2f2bf70016dc3a181e3af40e555be5ccdffa06ffbe311bd7f1914979126f56fde4c7a95f3ee6a4f3c817e0214ef78d91c4bae85ad
-
SSDEEP
768:YXM0aPJQTlS/42KGA8MpXZv9HYGN3hFRLQpjKNQ806OLAlUybYAgIq2/D59x:YTwQQA8MpXZlHJtshK4qSOqwlf
Malware Config
Signatures
Files
-
3e353e37d82e483d6d6e0c033c3f1d6f825ce691b68ca9057082b7ac36892498.exe windows x86
fd6982789d03034735662c4265806b33
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualProtect
InitializeCriticalSection
QueryPerformanceCounter
DisableThreadLibraryCalls
UnhandledExceptionFilter
LocalAlloc
HeapAlloc
VirtualProtect
DeleteCriticalSection
GetModuleHandleA
DisableThreadLibraryCalls
FreeLibrary
GetTickCount
InterlockedIncrement
SetLastError
MultiByteToWideChar
UnhandledExceptionFilter
VirtualProtect
GetTickCount
DeleteCriticalSection
CreateEventW
GetCurrentProcessId
VirtualAlloc
lstrlenA
GetCurrentProcessId
ReadFile
SetLastError
GetLastError
GetCurrentThreadId
GetModuleFileNameA
QueryPerformanceCounter
ReadFile
lstrlenA
GetCurrentThreadId
GetCurrentProcessId
lstrcmpiW
lstrcmpiW
GetModuleHandleA
GetModuleHandleA
DeleteCriticalSection
QueryPerformanceCounter
ReadFile
InterlockedExchange
LocalFree
InterlockedDecrement
CreateEventW
GetSystemTimeAsFileTime
LoadLibraryW
LocalFree
QueryPerformanceCounter
GetCurrentThreadId
GetLastError
GetModuleFileNameW
LocalFree
CreateThread
VirtualProtect
LoadLibraryW
InitializeCriticalSection
InterlockedExchange
InterlockedDecrement
LoadLibraryW
LocalAlloc
LocalFree
InterlockedIncrement
EnterCriticalSection
HeapAlloc
gdi32
Polygon
GetCurrentObject
SelectObject
MoveToEx
BitBlt
CreateBitmap
RoundRect
Ellipse
GetPixel
StretchBlt
GetBrushOrgEx
CreateCompatibleDC
SetTextColor
CreateSolidBrush
CreateCompatibleDC
SelectObject
CombineRgn
LineTo
CreateBitmapIndirect
CreateCompatibleDC
CreateBitmap
GetBkMode
PatBlt
BitBlt
LineTo
SetBrushOrgEx
GetBrushOrgEx
GetWindowOrgEx
MoveToEx
CreateBitmapIndirect
LineTo
CreateSolidBrush
BitBlt
GetBkColor
SetBrushOrgEx
BitBlt
SetBkColor
Rectangle
Rectangle
GetBrushOrgEx
RoundRect
SetTextColor
PatBlt
CreateRectRgn
CreateDIBitmap
GetPixel
BitBlt
CreateSolidBrush
CreatePen
CreateFontA
LineTo
RoundRect
GetCurrentObject
RoundRect
BitBlt
CreateBitmapIndirect
GetBrushOrgEx
GetBrushOrgEx
Ellipse
SetWindowOrgEx
CreateFontA
SelectObject
CreateBitmap
RoundRect
CreateDIBitmap
SetTextColor
GetCurrentObject
user32
DialogBoxParamW
GetFocus
IsDlgButtonChecked
GetDlgItem
DefWindowProcW
EnableWindow
LoadStringW
GetWindowRect
LoadStringW
GetDesktopWindow
DispatchMessageW
IsWindow
GetSystemMetrics
SendMessageW
GetSysColor
GetWindowRect
SetWindowPos
SetWindowTextW
SetFocus
DefWindowProcW
EnableWindow
GetWindowRect
PeekMessageW
wsprintfA
LoadCursorW
GetDlgItem
GetSysColor
DispatchMessageW
PeekMessageW
GetWindowLongW
PeekMessageW
BeginPaint
GetFocus
TranslateMessage
CreateWindowExW
SetTimer
GetWindowRect
GetDlgItem
DispatchMessageW
ShowWindow
GetWindowRect
EnableWindow
GetParent
EndDialog
SetFocus
TranslateMessage
SetDlgItemTextW
GetSystemMetrics
SendMessageW
SetFocus
TranslateMessage
SetDlgItemTextW
GetDesktopWindow
EndPaint
GetParent
SetFocus
DispatchMessageW
GetDlgItem
GetFocus
LoadIconW
Sections
.text Size: 52KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ