Static task
static1
Behavioral task
behavioral1
Sample
3c5814ee36d6171ccd668be6dc4b1a18c99f7c50551662722680c5babc9963f3.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
3c5814ee36d6171ccd668be6dc4b1a18c99f7c50551662722680c5babc9963f3.exe
Resource
win10v2004-20220812-en
General
-
Target
3c5814ee36d6171ccd668be6dc4b1a18c99f7c50551662722680c5babc9963f3
-
Size
539KB
-
MD5
f7b239df7e55d1aabaefc69c27fe7172
-
SHA1
10dd787d426e4cd44b3d3f8327d9d3d1795ae295
-
SHA256
3c5814ee36d6171ccd668be6dc4b1a18c99f7c50551662722680c5babc9963f3
-
SHA512
f60659aa628282f2703515961f849a10b5123cdd39cc4add3fdedf6b1a29fdd4a3f8654aa7e290a452b261b73679832326fe70a2299b6e8903b4eddc4d3ff3bf
-
SSDEEP
12288:cX1DC/l9fxW8PpSXEaZ4CYIssAfoOj3LEn2QoL:cyc8Bpa91Edj7EO
Malware Config
Signatures
Files
-
3c5814ee36d6171ccd668be6dc4b1a18c99f7c50551662722680c5babc9963f3.exe windows x86
ba89491c5dd6b2f517491a202da4c4d7
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_BIND
IMAGE_DLLCHARACTERISTICS_APPCONTAINER
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapSize
WriteConsoleW
SetStdHandle
RtlUnwind
FlushFileBuffers
LoadLibraryW
HeapReAlloc
GetStringTypeW
LCMapStringW
GetConsoleMode
GetConsoleCP
SetFilePointer
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetModuleFileNameW
WriteFile
ExitProcess
lstrcpyA
GetFileType
InitializeCriticalSectionAndSpinCount
SetHandleCount
IsProcessorFeaturePresent
GetProcAddress
GetCurrentThreadId
SetLastError
GetModuleHandleW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
IsValidCodePage
DeleteFileA
GetSystemTime
CloseHandle
GetModuleHandleA
GetModuleFileNameA
DeleteTimerQueue
WriteConsoleA
GetLastError
GetStdHandle
CreateDirectoryA
GlobalUnlock
MultiByteToWideChar
GetSystemDirectoryA
ReadFile
MulDiv
HeapCreate
FreeConsole
Sleep
CreateFileA
GlobalAlloc
GetProcessTimes
GetSystemTimeAsFileTime
WaitForSingleObject
GlobalLock
GetCurrentProcess
ReadConsoleA
HeapAlloc
GetOEMCP
GetACP
InterlockedDecrement
InterlockedIncrement
GetCPInfo
TerminateProcess
EncodePointer
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
DecodePointer
HeapFree
GetStartupInfoW
HeapSetInformation
GetCommandLineA
LeaveCriticalSection
EnterCriticalSection
AllocConsole
lstrlenA
CreateTimerQueue
DeleteCriticalSection
CreateFileW
user32
GetMonitorInfoA
MoveWindow
RegisterClassA
LoadCursorA
FindWindowA
SetClipboardData
EndPaint
GetDlgItemInt
SetWindowRgn
SetTimer
GetWindowRect
IsMenu
RegisterClassExA
PostQuitMessage
GetMenuItemID
KillTimer
LoadBitmapA
EnableWindow
wsprintfA
WindowFromPoint
GetClientRect
SendMessageA
SetRectEmpty
BeginPaint
PtInRect
LoadIconA
GetDC
GetMenu
TrackPopupMenuEx
MessageBoxA
InvalidateRect
CreateWindowExA
ReleaseDC
GetDlgItem
DefWindowProcA
SetWindowPos
GetCursorPos
GetMenuStringA
ShowWindow
CreatePopupMenu
GetMenuItemCount
PostMessageA
GetSystemMetrics
LoadImageA
UpdateWindow
gdi32
CreateSolidBrush
DeleteEnhMetaFile
BeginPath
CreateEllipticRgn
AnimatePalette
CreateEnhMetaFileA
GetDeviceCaps
SetBkMode
DeleteObject
SelectObject
CreateCompatibleDC
DPtoLP
Ellipse
EndPath
RealizePalette
CreateFontW
SelectPalette
CreateRectRgn
CreatePen
GetObjectA
PathToRegion
CloseEnhMetaFile
TextOutA
comdlg32
ChooseColorA
advapi32
LookupAccountNameW
shell32
SHBrowseForFolderA
SHGetMalloc
SHGetPathFromIDListA
SHGetFileInfoA
SHGetDesktopFolder
ole32
CoInitialize
CreateStreamOnHGlobal
CoCreateInstance
oleaut32
OleLoadPicture
ws2_32
WSAGetLastError
WSACreateEvent
netapi32
NetLocalGroupEnum
NetApiBufferFree
iphlpapi
NotifyRouteChange
shlwapi
StrFormatByteSizeA
PathFileExistsA
comctl32
ImageList_Create
Sections
.text Size: 278KB - Virtual size: 277KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 148KB - Virtual size: 148KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 13KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 98KB - Virtual size: 97KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ