Static task
static1
Behavioral task
behavioral1
Sample
3c18b5ce8bf2951092416942c6799dd6a11cc5bae8d8f99078a67469c063878e.exe
Resource
win7-20221111-en
General
-
Target
3c18b5ce8bf2951092416942c6799dd6a11cc5bae8d8f99078a67469c063878e
-
Size
3.4MB
-
MD5
418e81200b4a639df0deb19bced909b0
-
SHA1
9af4ed6eb47b8d2732a4161d5a1e6aae7847d8ae
-
SHA256
3c18b5ce8bf2951092416942c6799dd6a11cc5bae8d8f99078a67469c063878e
-
SHA512
dd59f9dd87c9aafde7f60b4e57c78a7e4d41b766eaca6afc6e7f791a62351f1375f55469a051fd6b1f175c76c397fbdad25747283fc8aa416666bcf6bd9e4ccc
-
SSDEEP
49152:bTb316DuSjEVsE6uqhZ0t1zpLFnXx8Y436B2DPjoDTOBzL+U+6Q8P:bTx6aHspgX6t36SPEDPH6
Malware Config
Signatures
Files
-
3c18b5ce8bf2951092416942c6799dd6a11cc5bae8d8f99078a67469c063878e.exe windows x86
1d2cbf7d32164289781e1d3c09b49c7a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
HeapReAlloc
DeleteCriticalSection
InitializeCriticalSection
EnterCriticalSection
FileTimeToSystemTime
IsBadWritePtr
GetProcessHeap
HeapAlloc
HeapFree
CreateMutexA
Sleep
MultiByteToWideChar
WaitForSingleObject
GetModuleHandleExW
GetTickCount
InterlockedCompareExchange
ExitProcess
SetLastError
GetModuleHandleA
GetVersionExA
VirtualAlloc
VirtualFree
WideCharToMultiByte
GetCurrentProcess
GetFileAttributesA
CloseHandle
GetTempPathA
GetLastError
GetProcAddress
LoadLibraryA
RemoveDirectoryA
IsBadReadPtr
LocalFileTimeToFileTime
DuplicateHandle
ExitThread
CreateFileW
WriteConsoleW
GetConsoleCP
FlushFileBuffers
SetStdHandle
LoadLibraryW
OutputDebugStringW
LCMapStringW
LoadLibraryExW
GetModuleHandleW
TlsFree
SetEndOfFile
TlsSetValue
TlsGetValue
TlsAlloc
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FreeEnvironmentStringsW
IsProcessorFeaturePresent
ReadFile
GetSystemTimeAsFileTime
RtlUnwind
GetCommandLineA
InterlockedDecrement
AreFileApisANSI
HeapSize
IsDebuggerPresent
InterlockedIncrement
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCurrentThreadId
RaiseException
GetStdHandle
WriteFile
GetModuleFileNameW
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
GetConsoleMode
ReadConsoleW
SetFilePointer
SetFilePointerEx
GetFileType
GetStartupInfoW
GetStringTypeW
GetModuleFileNameA
QueryPerformanceCounter
GetCurrentProcessId
GetEnvironmentStringsW
advapi32
RegEnumKeyExW
RegCreateKeyW
RegCreateKeyExW
RegQueryInfoKeyW
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegQueryInfoKeyA
RegOpenKeyExW
RegEnumKeyExA
RegCreateKeyExA
RegOpenKeyW
user32
SendMessageW
SetWindowPos
LoadIconW
AppendMenuA
GetParent
EnumWindows
GetLastInputInfo
DefWindowProcW
CreateWindowExA
CreatePopupMenu
SetForegroundWindow
SetFocus
TranslateMessage
MsgWaitForMultipleObjects
PostMessageW
SendMessageA
BringWindowToTop
PostMessageA
FindWindowW
CheckMenuItem
DispatchMessageW
GetWindowTextW
FindWindowA
TrackPopupMenu
RegisterWindowMessageW
CloseDesktop
GetCursorPos
GetWindowTextA
UpdateWindow
Sections
.text Size: 541KB - Virtual size: 540KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2.7MB - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 100KB - Virtual size: 110KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ