Static task
static1
Behavioral task
behavioral1
Sample
d3b954ad4ac1f3911c3f1f9cc09eb42a55d503f81fae5bebf4d65969da30f214.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d3b954ad4ac1f3911c3f1f9cc09eb42a55d503f81fae5bebf4d65969da30f214.exe
Resource
win10v2004-20221111-en
General
-
Target
d3b954ad4ac1f3911c3f1f9cc09eb42a55d503f81fae5bebf4d65969da30f214
-
Size
572KB
-
MD5
61ad2da3ad18e185bf4a2732555c13d8
-
SHA1
b98edd59d7921dc921b80c8107487a5c647bc3d3
-
SHA256
d3b954ad4ac1f3911c3f1f9cc09eb42a55d503f81fae5bebf4d65969da30f214
-
SHA512
749f7e222b30de0925b47c223f6c1fb61f155c7819171c35c4828c39c3d275761f043066035fc2b69e6bd71398f7f1c6d4912bc5b735fe3f71ebddc950c5f76d
-
SSDEEP
12288:I/PVbTKoxzdtwGC5vJit0X6UzD7NhBGqBC:I3VbTKoxwJYs6UzPvBGG
Malware Config
Signatures
Files
-
d3b954ad4ac1f3911c3f1f9cc09eb42a55d503f81fae5bebf4d65969da30f214.exe windows x86
2f2cc0a5b07d6537a8acc9d8c980b546
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleFileNameA
TlsSetValue
GetDateFormatA
GetUserDefaultLCID
GetLastError
GetModuleHandleA
GetProcAddress
ReadFile
CompareStringW
QueryPerformanceCounter
WriteConsoleW
HeapFree
VirtualAlloc
WriteConsoleA
TlsAlloc
InterlockedDecrement
GetCurrentThreadId
UnhandledExceptionFilter
InterlockedExchange
ExitProcess
SetConsoleCtrlHandler
WideCharToMultiByte
TlsGetValue
GetVersionExA
SetHandleCount
EnterCriticalSection
CompareStringA
InterlockedIncrement
Sleep
GetSystemTimeAsFileTime
GetProcessHeap
SetFilePointer
GetOEMCP
RtlUnwind
GetACP
LockResource
FillConsoleOutputAttribute
GetStringTypeW
GetCurrentThread
HeapCreate
GetCurrentProcessId
FreeEnvironmentStringsA
IsValidLocale
HeapSize
LoadLibraryA
GetCommandLineA
SetConsoleMode
MultiByteToWideChar
SetStdHandle
IsDebuggerPresent
GetEnvironmentStringsW
TlsFree
LCMapStringW
GetConsoleCP
GetConsoleMode
CreateFileA
FlushFileBuffers
HeapReAlloc
OpenMutexA
GetCPInfo
WritePrivateProfileSectionW
FreeLibrary
CommConfigDialogW
GetTickCount
TerminateProcess
ReadConsoleA
GetCurrentProcess
GetTimeZoneInformation
VirtualFree
GetStringTypeA
GetCurrencyFormatA
GetFileType
EnumSystemLocalesA
HeapAlloc
SetLastError
GetStartupInfoA
LCMapStringA
LeaveCriticalSection
MapViewOfFileEx
GetEnvironmentStrings
GetLocaleInfoW
DeleteCriticalSection
InitializeCriticalSection
HeapDestroy
IsValidCodePage
SetEnvironmentVariableA
GetConsoleOutputCP
CreateMutexA
GetStdHandle
GetTimeFormatA
CloseHandle
SetUnhandledExceptionFilter
VirtualQuery
CreateDirectoryExA
GetLocaleInfoA
EnumCalendarInfoExA
WriteFile
FreeEnvironmentStringsW
comdlg32
PrintDlgA
comctl32
InitCommonControlsEx
user32
InvalidateRgn
RegisterClassExA
OpenWindowStationA
GetKeyState
InvertRect
InternalGetWindowText
SetWindowContextHelpId
DdeCreateStringHandleW
OffsetRect
SetPropA
RegisterClassA
DrawFrameControl
GetMenuItemCount
gdi32
EndPath
RectInRegion
ExtEscape
SetGraphicsMode
Sections
.text Size: 194KB - Virtual size: 193KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 9KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 359KB - Virtual size: 358KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ