Static task
static1
Behavioral task
behavioral1
Sample
3c1ae38029ae606b9d0e024637c2758e8281a8c53591b0ad392193063fd58f3f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
3c1ae38029ae606b9d0e024637c2758e8281a8c53591b0ad392193063fd58f3f.exe
Resource
win10v2004-20221111-en
General
-
Target
3c1ae38029ae606b9d0e024637c2758e8281a8c53591b0ad392193063fd58f3f
-
Size
212KB
-
MD5
abb9d3faa74b7d91790c9e5b12adf625
-
SHA1
3393c95dd89c1024f66d1cba88968252b420bde6
-
SHA256
3c1ae38029ae606b9d0e024637c2758e8281a8c53591b0ad392193063fd58f3f
-
SHA512
18825f7b8f35defec29012903a18a0a85a2a370b1926c01bb069d6d5abb7c83f8a652f16d7b2d4358c31d07f3606bb18851e85670669101fddf8d1a553316f8e
-
SSDEEP
6144:5LOfykIWg/I+Omd6n1ENGQNGmt7pymjA2A:RG9xtOjA
Malware Config
Signatures
Files
-
3c1ae38029ae606b9d0e024637c2758e8281a8c53591b0ad392193063fd58f3f.exe windows x86
b3ad2e304cce6977b6fd00c2c5019210
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetMonitorInfoA
GetKeyboardState
RemoveMenu
GetKeyboardLayout
LoadStringW
CheckDlgButton
DialogBoxParamW
VkKeyScanA
ValidateRgn
GetComboBoxInfo
GetMouseMovePointsEx
ExcludeUpdateRgn
GetKeyboardType
GetCursorPos
IsWindow
EnumClipboardFormats
GetGuiResources
CreateAcceleratorTableW
InvalidateRect
OpenClipboard
GetAltTabInfoA
GetMenuState
WindowFromDC
IsCharAlphaW
DrawAnimatedRects
GetMessageTime
GetWindowContextHelpId
GetCursor
MonitorFromPoint
ScrollDC
GetCapture
IsCharAlphaA
ReplyMessage
DefFrameProcW
GetTopWindow
BeginDeferWindowPos
GetScrollPos
NotifyWinEvent
GetGUIThreadInfo
ScrollWindow
GetKeyState
GetAncestor
IsChild
KillTimer
GetMenuDefaultItem
EndDeferWindowPos
GetClipboardViewer
GetThreadDesktop
ScrollWindowEx
GetScrollBarInfo
GetLastActivePopup
advapi32
GetSecurityDescriptorLength
RegCreateKeyW
GetKernelObjectSecurity
gdi32
GetTextMetricsA
EnumFontFamiliesExA
crypt32
CryptMsgOpenToDecode
version
VerQueryValueA
kernel32
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
GetLocaleInfoA
HeapSize
RtlUnwind
HeapReAlloc
VirtualAlloc
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
InitializeCriticalSectionAndSpinCount
LoadLibraryA
IsDebuggerPresent
GetCurrentProcess
EnterCriticalSection
LeaveCriticalSection
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
HeapFree
VirtualFree
HeapCreate
InterlockedDecrement
GetCurrentThreadId
SetLastError
InterlockedIncrement
TlsFree
TlsAlloc
TlsGetValue
DeleteCriticalSection
GetFileType
TerminateProcess
UnhandledExceptionFilter
GetNumaNodeProcessorMask
SetHandleCount
GetEnvironmentStringsW
FindFirstFileExW
GetThreadPriority
ResetWriteWatch
FindNextChangeNotification
LockResource
GetFileAttributesExW
LocalShrink
CreateIoCompletionPort
MapUserPhysicalPagesScatter
GetModuleFileNameW
CreateMemoryResourceNotification
TlsSetValue
GetStdHandle
GetThreadContext
QueryMemoryResourceNotification
PurgeComm
EscapeCommFunction
RequestWakeupLatency
HeapAlloc
PrepareTape
GetProcessHeap
SetSystemTimeAdjustment
EncodePointer
GetFileSize
GetNumaAvailableMemoryNode
ReleaseSemaphore
GetVersion
SetEndOfFile
SetDllDirectoryA
IsDBCSLeadByte
GetLocalTime
GetSystemTimeAsFileTime
HeapDestroy
GetCommandLineW
FileTimeToLocalFileTime
FindResourceExW
GetUserDefaultLCID
SetFileAttributesA
GetCommandLineA
GetStartupInfoA
SetUnhandledExceptionFilter
GetModuleHandleW
Sleep
GetProcAddress
ExitProcess
WriteFile
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
Sections
.text Size: 159KB - Virtual size: 158KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ