Static task
static1
Behavioral task
behavioral1
Sample
3704ab726e252f4f92c40d9fbaa0c23fad1f411b914a2ba64cef0cc648a1cea5.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
3704ab726e252f4f92c40d9fbaa0c23fad1f411b914a2ba64cef0cc648a1cea5.exe
Resource
win10v2004-20220812-en
General
-
Target
3704ab726e252f4f92c40d9fbaa0c23fad1f411b914a2ba64cef0cc648a1cea5
-
Size
211KB
-
MD5
a6836d94c80e2494ebc734eb43d147ee
-
SHA1
f2c2a35a96e008a427483316000659f5f8eb5bff
-
SHA256
3704ab726e252f4f92c40d9fbaa0c23fad1f411b914a2ba64cef0cc648a1cea5
-
SHA512
9fd01df3cd74857abc08f2004d0ab8f7a217a68c07d7160b1764dee1a9a406930e4ea267db60ad0b484508a89df64244949640cd65523194fc3d3b5510873e44
-
SSDEEP
6144:PLOfykIWg/I+Omd6n1ENGQNGmt7pymEW0Jb:jG9xtOMWKb
Malware Config
Signatures
Files
-
3704ab726e252f4f92c40d9fbaa0c23fad1f411b914a2ba64cef0cc648a1cea5.exe windows x86
b3ad2e304cce6977b6fd00c2c5019210
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetMonitorInfoA
GetKeyboardState
RemoveMenu
GetKeyboardLayout
LoadStringW
CheckDlgButton
DialogBoxParamW
VkKeyScanA
ValidateRgn
GetComboBoxInfo
GetMouseMovePointsEx
ExcludeUpdateRgn
GetKeyboardType
GetCursorPos
IsWindow
EnumClipboardFormats
GetGuiResources
CreateAcceleratorTableW
InvalidateRect
OpenClipboard
GetAltTabInfoA
GetMenuState
WindowFromDC
IsCharAlphaW
DrawAnimatedRects
GetMessageTime
GetWindowContextHelpId
GetCursor
MonitorFromPoint
ScrollDC
GetCapture
IsCharAlphaA
ReplyMessage
DefFrameProcW
GetTopWindow
BeginDeferWindowPos
GetScrollPos
NotifyWinEvent
GetGUIThreadInfo
ScrollWindow
GetKeyState
GetAncestor
IsChild
KillTimer
GetMenuDefaultItem
EndDeferWindowPos
GetClipboardViewer
GetThreadDesktop
ScrollWindowEx
GetScrollBarInfo
GetLastActivePopup
advapi32
GetSecurityDescriptorLength
RegCreateKeyW
GetKernelObjectSecurity
gdi32
GetTextMetricsA
EnumFontFamiliesExA
crypt32
CryptMsgOpenToDecode
version
VerQueryValueA
kernel32
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
GetLocaleInfoA
HeapSize
RtlUnwind
HeapReAlloc
VirtualAlloc
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
InitializeCriticalSectionAndSpinCount
LoadLibraryA
IsDebuggerPresent
GetCurrentProcess
EnterCriticalSection
LeaveCriticalSection
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
HeapFree
VirtualFree
HeapCreate
InterlockedDecrement
GetCurrentThreadId
SetLastError
InterlockedIncrement
TlsFree
TlsAlloc
TlsGetValue
DeleteCriticalSection
GetFileType
TerminateProcess
UnhandledExceptionFilter
GetNumaNodeProcessorMask
SetHandleCount
GetEnvironmentStringsW
FindFirstFileExW
GetThreadPriority
ResetWriteWatch
FindNextChangeNotification
LockResource
GetFileAttributesExW
LocalShrink
CreateIoCompletionPort
MapUserPhysicalPagesScatter
GetModuleFileNameW
CreateMemoryResourceNotification
TlsSetValue
GetStdHandle
GetThreadContext
QueryMemoryResourceNotification
PurgeComm
EscapeCommFunction
RequestWakeupLatency
HeapAlloc
PrepareTape
GetProcessHeap
SetSystemTimeAdjustment
EncodePointer
GetFileSize
GetNumaAvailableMemoryNode
ReleaseSemaphore
GetVersion
SetEndOfFile
SetDllDirectoryA
IsDBCSLeadByte
GetLocalTime
GetSystemTimeAsFileTime
HeapDestroy
GetCommandLineW
FileTimeToLocalFileTime
FindResourceExW
GetUserDefaultLCID
SetFileAttributesA
GetCommandLineA
GetStartupInfoA
SetUnhandledExceptionFilter
GetModuleHandleW
Sleep
GetProcAddress
ExitProcess
WriteFile
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
Sections
.text Size: 159KB - Virtual size: 158KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ