Static task
static1
Behavioral task
behavioral1
Sample
4cc3fdd2b9e9ccec1203c8b153e47e9d0632d05ce97c3362c3552c876d8a5e43.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
4cc3fdd2b9e9ccec1203c8b153e47e9d0632d05ce97c3362c3552c876d8a5e43.exe
Resource
win10v2004-20220812-en
General
-
Target
4cc3fdd2b9e9ccec1203c8b153e47e9d0632d05ce97c3362c3552c876d8a5e43
-
Size
3.7MB
-
MD5
0f3c19354bca37d528ca01952ca2adf5
-
SHA1
6b407d41ea30461940e6550da333795e0a56b9c1
-
SHA256
4cc3fdd2b9e9ccec1203c8b153e47e9d0632d05ce97c3362c3552c876d8a5e43
-
SHA512
fb64589149924605e2f910a558d600b487ca61c7d133087a9e544ff7a0237cebd123e7a7fc681a1bdf8bb5720a7d0569024a0183ede147cc1226e6dfc1133ab3
-
SSDEEP
98304:PDJQgTe5T8B2TtNzHY5jGctrCSDcxeiBhLf2pTSWJmmf+9:Wqs8B01HSKyrClxnh+pOWJmmf+
Malware Config
Signatures
Files
-
4cc3fdd2b9e9ccec1203c8b153e47e9d0632d05ce97c3362c3552c876d8a5e43.exe windows x86
09e5a1c5c1166465b9969cd4cb1e0e02
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleW
GetTickCount
GetCurrentThread
FindActCtxSectionStringA
GetConsoleMode
SizeofResource
GetStringTypeExW
TerminateProcess
GetProcAddress
GetNumaHighestNodeNumber
SetEvent
CreateEventW
SetProcessWorkingSetSize
GetOEMCP
_lread
GetCommTimeouts
lstrcatW
UpdateResourceW
DeleteFileA
InterlockedCompareExchange
GetUserDefaultLCID
SetEndOfFile
EnumDateFormatsExW
FindFirstChangeNotificationW
GetNumaNodeProcessorMask
LocalAlloc
GetStringTypeW
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
EnterCriticalSection
LeaveCriticalSection
GetStdHandle
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
EncodePointer
DecodePointer
GetLastError
HeapFree
Sleep
ExitProcess
MultiByteToWideChar
ReadFile
TlsGetValue
TlsSetValue
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
RtlUnwind
HeapAlloc
LoadLibraryW
WriteFile
GetModuleFileNameW
WideCharToMultiByte
GetConsoleCP
FlushFileBuffers
SetFilePointer
SetStdHandle
GetCPInfo
GetACP
IsValidCodePage
CloseHandle
WriteConsoleW
LCMapStringW
CreateFileW
user32
GetCaretPos
GetCursor
advapi32
GetPrivateObjectSecurity
AddAuditAccessAce
DestroyPrivateObjectSecurity
winhttp
WinHttpCreateUrl
msimg32
TransparentBlt
Sections
.text Size: 3.7MB - Virtual size: 3.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gexabif Size: 10KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 3.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ