Static task
static1
Behavioral task
behavioral1
Sample
c3876ff68616e6bae6f2b443dc79b285a8b40b99c2743d15630e971cfe920c39.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c3876ff68616e6bae6f2b443dc79b285a8b40b99c2743d15630e971cfe920c39.exe
Resource
win10v2004-20220812-en
General
-
Target
c3876ff68616e6bae6f2b443dc79b285a8b40b99c2743d15630e971cfe920c39
-
Size
222KB
-
MD5
24ac3eed42c70a31c46e9136d455a0f5
-
SHA1
08f3bc36511fb8ecc8367df1d58d1c9f9e36a8ba
-
SHA256
c3876ff68616e6bae6f2b443dc79b285a8b40b99c2743d15630e971cfe920c39
-
SHA512
ae4dba4deed10a7234bd7c3973e9a9e3a5c17791f398d3f4226bfdfd2f00a8a7cc0c9e6ca97108e70fbb78200e7d2361763bfb62b949dc1384ce37977a82b650
-
SSDEEP
3072:1MXzdJ/ivvPnqk0T6ntInVDDjwVQNg1QWRWnnQ8GRt4h0MeF5/EfEfded/IZe5E:SDdJweT6nteVDoVQNRnQxUGEws5ee
Malware Config
Signatures
Files
-
c3876ff68616e6bae6f2b443dc79b285a8b40b99c2743d15630e971cfe920c39.exe windows x86
768906f6d87887c8c8bd8dc82362a130
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
__set_app_type
wcscat
_wcsnicmp
_controlfp
_adjust_fdiv
__p__fmode
wcschr
__wgetmainargs
fwprintf
_initterm
fclose
_XcptFilter
wcsrchr
wcscmp
_c_exit
_exit
exit
_wcsicmp
__p__commode
_cexit
_except_handler3
gdi32
CreateDIBitmap
SetROP2
GetWindowOrgEx
GetBrushOrgEx
GetEnhMetaFileBits
MaskBlt
CreateSolidBrush
SetBkColor
GetTextMetricsA
GetDCOrgEx
SetWindowOrgEx
SetBkMode
GetDIBits
CreateDIBSection
GetDeviceCaps
GetCurrentPositionEx
GetSystemPaletteEntries
GetPaletteEntries
GetClipBox
BitBlt
SetViewportOrgEx
CreateHalftonePalette
RectVisible
SetViewportExtEx
CreateFontIndirectA
SelectClipRgn
GetObjectA
LineTo
advapi32
RegQueryValueA
RegOpenKeyA
RegCloseKey
shell32
CommandLineToArgvW
Shell_NotifyIconA
kernel32
FileTimeToSystemTime
GetLastError
ExitProcess
lstrcpynW
GetSystemTimeAsFileTime
lstrlenW
GetCommandLineA
QueryPerformanceCounter
UnhandledExceptionFilter
GetCurrentProcess
VirtualAlloc
LocalFree
VirtualFree
FormatMessageW
lstrcpyW
GetTempPathW
FreeLibrary
CloseHandle
GetModuleHandleA
GetProcAddress
GetTickCount
GetFullPathNameW
Sections
.text Size: 177KB - Virtual size: 177KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 21KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ