Static task
static1
Behavioral task
behavioral1
Sample
3435d05b68df6ee9b6911cfb5025422b4fdf2a4e1c6c1e190cd8b628d5c14d2f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
3435d05b68df6ee9b6911cfb5025422b4fdf2a4e1c6c1e190cd8b628d5c14d2f.exe
Resource
win10v2004-20221111-en
General
-
Target
3435d05b68df6ee9b6911cfb5025422b4fdf2a4e1c6c1e190cd8b628d5c14d2f
-
Size
4.0MB
-
MD5
d23e0e92cd5e249c4ce89f1a66b45e5c
-
SHA1
016e31c18cb1c10d9c533a7ec6cdaae56edc8241
-
SHA256
3435d05b68df6ee9b6911cfb5025422b4fdf2a4e1c6c1e190cd8b628d5c14d2f
-
SHA512
c13405d9ebf623735460403434afaae5f89384289c5a0995ea8acb6a94ab8d22b9ac33c86fedf54ad991c3843fcd73c25346ac71ffcada728d73bb4b0bf7d089
-
SSDEEP
98304:yQKD+MqXqjTMO4j6tfzFRe3sh3ByMONEtFrJDTb9ZoJn8pUTRCEeNDJfS+edJX2k:DK9jTBY6yFH
Malware Config
Signatures
Files
-
3435d05b68df6ee9b6911cfb5025422b4fdf2a4e1c6c1e190cd8b628d5c14d2f.exe windows x86
be824935400ed0b50791ce25db65ef97
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
FileTimeToSystemTime
SetLastError
GetFileAttributesA
CreateFileA
GetCurrentProcess
WideCharToMultiByte
MultiByteToWideChar
WaitForSingleObject
ExitThread
AddVectoredExceptionHandler
GetProcessHeap
CreateMutexA
GetModuleHandleExW
CloseHandle
GetLastError
InterlockedCompareExchange
GetLocalTime
EnterCriticalSection
GetModuleHandleA
GetVersionExA
IsBadWritePtr
LeaveCriticalSection
DeleteCriticalSection
VirtualAlloc
VirtualFree
GetTempPathA
GetProcAddress
LoadLibraryA
GetCurrentThread
RemoveDirectoryA
ResumeThread
GetCurrentThreadId
ExitProcess
HeapAlloc
LocalFileTimeToFileTime
HeapFree
GetTickCount
FileTimeToLocalFileTime
CreateFileW
Sleep
InitializeCriticalSection
WriteConsoleW
GetConsoleCP
FlushFileBuffers
SetStdHandle
LoadLibraryW
OutputDebugStringW
LCMapStringW
HeapReAlloc
LoadLibraryExW
SetEndOfFile
GetModuleHandleW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCurrentProcessId
QueryPerformanceCounter
GetModuleFileNameA
IsProcessorFeaturePresent
ReadFile
GetSystemTimeAsFileTime
RtlUnwind
GetCommandLineA
InterlockedDecrement
AreFileApisANSI
HeapSize
IsDebuggerPresent
InterlockedIncrement
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
RaiseException
GetStdHandle
WriteFile
GetModuleFileNameW
InitializeCriticalSectionAndSpinCount
SetFilePointer
SetFilePointerEx
GetConsoleMode
ReadConsoleW
GetFileType
GetStartupInfoW
GetStringTypeW
advapi32
RegQueryInfoKeyW
RegEnumKeyA
RegQueryInfoKeyA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
RegEnumKeyExW
RegOpenKeyW
RegQueryValueExW
RegEnumKeyW
RegEnumValueW
RegOpenKeyA
RegCreateKeyExA
RegOpenKeyExW
RegQueryValueW
user32
MessageBoxA
BringWindowToTop
SetFocus
DefWindowProcW
AppendMenuW
DispatchMessageA
GetWindowTextW
RegisterClassExA
PostMessageW
RegisterClassExW
SetWindowPos
UpdateWindow
LoadIconA
GetClientRect
PostMessageA
SendMessageA
FindWindowW
CreatePopupMenu
DefWindowProcA
PeekMessageA
CloseDesktop
TrackPopupMenu
GetWindowRect
RegisterWindowMessageA
SetForegroundWindow
RedrawWindow
EnumWindows
GetLastInputInfo
PostQuitMessage
GetWindowTextA
CreateWindowExA
DestroyWindow
DispatchMessageW
Sections
.text Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2.6MB - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 78KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ