Static task
static1
Behavioral task
behavioral1
Sample
3ab7286b3bc0edf3370dc1e101f60fbef2a37f5673d2158f6f1ab4140d3ee3db.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
3ab7286b3bc0edf3370dc1e101f60fbef2a37f5673d2158f6f1ab4140d3ee3db.exe
Resource
win10v2004-20220812-en
General
-
Target
3ab7286b3bc0edf3370dc1e101f60fbef2a37f5673d2158f6f1ab4140d3ee3db
-
Size
1.7MB
-
MD5
765174fcf3dee93872499eda6dbb945c
-
SHA1
b086522cb2ee91d4d0fc4d69fcf369e80d76f7c5
-
SHA256
3ab7286b3bc0edf3370dc1e101f60fbef2a37f5673d2158f6f1ab4140d3ee3db
-
SHA512
1b68a49a72f60a509511e0b2b9b728765a03867d5cb3c9e0fcf3fece7ad9d1fd4c8ecfe0d0b414caea6c4fa992df913c22596c97f4ac3e014851aaa25fa9882c
-
SSDEEP
49152:bc6xFqOTTnxz+opYshvjhB/ZVGbap6EQ78H2HdyLB/iibw81:TxTfxaopYSjhB/ZVGbap6Z7s2MLFzbw
Malware Config
Signatures
Files
-
3ab7286b3bc0edf3370dc1e101f60fbef2a37f5673d2158f6f1ab4140d3ee3db.exe windows x86
8efb464e0ade7eba1b8a99fe095d0a7e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
wininet
InternetCheckConnectionA
urlmon
URLDownloadToFileA
kernel32
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetProcessHeap
SetEnvironmentVariableA
GetPrivateProfileIntA
GetPrivateProfileStringA
WritePrivateProfileStringA
lstrcpyA
FreeLibrary
GetCurrentProcess
Process32First
WaitForSingleObject
CreateRemoteThread
GetWindowsDirectoryA
OpenProcess
VirtualFreeEx
Sleep
CreateProcessA
TerminateProcess
Module32First
GetLastError
lstrcmpiA
GetProcAddress
SetFileAttributesA
VirtualAllocEx
LoadLibraryA
Process32Next
GetSystemInfo
GetModuleHandleA
CreateToolhelp32Snapshot
Module32Next
GetVersionExA
CloseHandle
WriteProcessMemory
FindResourceA
LoadResource
WideCharToMultiByte
SizeofResource
LockResource
GetModuleFileNameA
lstrlenA
MultiByteToWideChar
GlobalAlloc
lstrcmpA
GlobalLock
InterlockedExchange
CompareStringA
LoadLibraryExA
GetLocaleInfoA
EnumResourceLanguagesA
ConvertDefaultLocale
GetCurrentThreadId
GetCurrentThread
GlobalDeleteAtom
SetLastError
GetCurrentProcessId
GlobalAddAtomA
GlobalFree
FreeResource
SetThreadPriority
ResumeThread
MulDiv
lstrlenW
LocalFree
FormatMessageA
GlobalSize
CopyFileA
lstrcmpW
GlobalFindAtomA
GlobalGetAtomNameA
GetModuleFileNameW
InterlockedDecrement
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
GlobalFlags
GetThreadLocale
FileTimeToSystemTime
GetCurrentDirectoryA
LocalAlloc
TlsGetValue
GlobalReAlloc
GlobalHandle
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
InterlockedIncrement
DeleteFileA
ReadFile
WriteFile
SetFilePointer
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetFileSize
DuplicateHandle
FindClose
FindFirstFileA
GetVolumeInformationA
GetFullPathNameA
CreateFileA
GetModuleHandleW
GetFileAttributesA
GetCPInfo
GetOEMCP
SetErrorMode
FileTimeToLocalFileTime
GetFileSizeEx
GetFileTime
GetTickCount
GetTempFileNameA
GetTempPathA
LoadLibraryW
GetSystemDirectoryW
SearchPathA
GetProfileIntA
VirtualProtect
FindResourceExA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
CreateDirectoryA
GetTimeZoneInformation
GetCommandLineA
GetStartupInfoA
HeapAlloc
HeapFree
HeapReAlloc
RtlUnwind
GlobalUnlock
ExitProcess
RaiseException
ExitThread
CreateThread
VirtualAlloc
VirtualQuery
HeapSize
GetSystemTimeAsFileTime
SetStdHandle
GetFileType
SetHandleCount
GetStdHandle
GetACP
IsValidCodePage
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetConsoleCP
GetConsoleMode
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
HeapDestroy
VirtualFree
QueryPerformanceCounter
InitializeCriticalSectionAndSpinCount
CompareStringW
user32
LoadAcceleratorsA
DestroyAcceleratorTable
GetAsyncKeyState
GetKeyboardState
GetKeyboardLayout
MapVirtualKeyA
ToAsciiEx
DestroyMenu
PostThreadMessageA
LoadMenuA
SetRectEmpty
GetNextDlgTabItem
GetNextDlgGroupItem
InvalidateRgn
InvalidateRect
SetRect
IsRectEmpty
CopyAcceleratorTableA
CharNextA
CharUpperA
DestroyIcon
WaitMessage
ReleaseCapture
SetCapture
EndPaint
BeginPaint
GetWindowDC
GrayStringA
DrawTextExA
DrawTextA
CreateAcceleratorTableA
SetWindowRgn
NotifyWinEvent
TabbedTextOutA
FillRect
DeleteMenu
LoadCursorA
GetDC
ReleaseDC
GetSysColorBrush
GetDesktopWindow
ClientToScreen
CreatePopupMenu
MoveWindow
SetWindowTextA
IsDialogMessageA
CheckDlgButton
RegisterWindowMessageA
LoadIconA
SendDlgItemMessageA
IsChild
GetCapture
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
IsWindow
SetFocus
GetWindowTextLengthA
GetWindowTextA
GetForegroundWindow
SetActiveWindow
BeginDeferWindowPos
EndDeferWindowPos
GetDlgItem
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
MapWindowPoints
ScrollWindow
TrackPopupMenu
SetMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
SetForegroundWindow
ShowScrollBar
UpdateWindow
SetParent
SetClassLongA
GetSystemMenu
IsMenu
InflateRect
SetTimer
KillTimer
BringWindowToTop
LockWindowUpdate
EnumChildWindows
RegisterClipboardFormatA
DrawStateA
DrawIcon
DestroyCursor
GetWindowRgn
CreateMenu
GetDoubleClickTime
GetIconInfo
SubtractRect
CopyIcon
CharUpperBuffA
GetUpdateRect
FrameRect
TranslateMDISysAccel
DrawMenuBar
DefMDIChildProcA
DefFrameProcA
IsClipboardFormatAvailable
MapVirtualKeyExA
GetKeyNameTextA
IsCharLowerA
GetMenuDefaultItem
SetMenuDefaultItem
UpdateLayeredWindow
EnableScrollBar
UnionRect
SetCursorPos
OpenClipboard
DrawFocusRect
DrawFrameControl
DrawEdge
CreateDialogIndirectParamA
EndDialog
UnpackDDElParam
ReuseDDElParam
InsertMenuItemA
TranslateAcceleratorA
UnregisterClassA
GetMenuItemInfoA
EmptyClipboard
CloseClipboard
SetClipboardData
LoadImageA
ShowWindow
CopyImage
GetClientRect
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
GetSysColor
AdjustWindowRectEx
ScreenToClient
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
CopyRect
SetWindowPlacement
PtInRect
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
GetMenu
SetWindowLongA
IntersectRect
IsIconic
GetWindowPlacement
GetWindowRect
GetSystemMetrics
WinHelpA
SystemParametersInfoA
OffsetRect
MessageBeep
RedrawWindow
IsZoomed
GetMenuStringA
AppendMenuA
GetMenuItemID
InsertMenuA
GetMenuItemCount
GetSubMenu
RemoveMenu
SetWindowsHookExA
CallNextHookEx
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
IsWindowVisible
GetKeyState
PeekMessageA
GetCursorPos
ValidateRect
GetWindow
SetWindowContextHelpId
MapDialogRect
SetWindowPos
GetWindowThreadProcessId
GetWindowLongA
GetLastActivePopup
IsWindowEnabled
EnableWindow
MessageBoxA
ShowOwnedPopups
SetCursor
PostMessageA
PostQuitMessage
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
GetFocus
GetParent
SendMessageA
ModifyMenuA
GetMenuState
EnableMenuItem
CheckMenuItem
WaitForInputIdle
wsprintfA
WindowFromPoint
DrawIconEx
advapi32
OpenProcessToken
GetTokenInformation
CryptReleaseContext
LookupPrivilegeValueA
CryptAcquireContextA
AllocateAndInitializeSid
CryptCreateHash
FreeSid
CheckTokenMembership
CryptDecrypt
CryptDestroyHash
AdjustTokenPrivileges
CryptHashData
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegDeleteKeyA
RegEnumKeyA
RegOpenKeyA
RegQueryValueA
RegCreateKeyExA
RegSetValueExA
RegDeleteValueA
RegEnumKeyExA
CryptDeriveKey
ole32
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
CoRegisterMessageFilter
CoRevokeClassObject
OleGetClipboard
DoDragDrop
OleFlushClipboard
OleIsCurrentClipboard
OleLockRunning
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CoInitializeEx
IsAccelerator
CreateStreamOnHGlobal
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CoCreateInstance
OleDuplicateData
CoTaskMemAlloc
ReleaseStgMedium
CoTaskMemFree
CLSIDFromProgID
RegisterDragDrop
CoLockObjectExternal
RevokeDragDrop
CoUninitialize
CLSIDFromString
shell32
ShellExecuteExA
DragQueryFileA
DragFinish
SHAppBarMessage
SHBrowseForFolderA
SHGetPathFromIDListA
SHGetFileInfoA
ShellExecuteA
oleaut32
SysStringLen
SysFreeString
SysAllocStringByteLen
SysAllocString
OleCreateFontIndirect
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroy
VariantCopy
VariantInit
VariantChangeType
VariantClear
SysAllocStringLen
shlwapi
PathFindExtensionA
PathFindFileNameA
PathRemoveFileSpecW
PathStripToRootA
PathIsUNCA
gdi32
GetWindowExtEx
GetViewportExtEx
CreateRectRgn
SelectClipRgn
SetTextAlign
MoveToEx
LineTo
IntersectClipRect
ExcludeClipRect
SetMapMode
SetROP2
SetPolyFillMode
SetBkMode
RestoreDC
SaveDC
DeleteObject
GetObjectA
SetBkColor
SetTextColor
GetClipBox
GetDCOrgEx
CopyMetaFileA
GetDeviceCaps
CreateBitmap
EnumFontFamiliesA
GetTextCharsetInfo
CreateRoundRectRgn
GetTextExtentPoint32A
SetDIBColorTable
PatBlt
GetDIBits
RealizePalette
CombineRgn
BitBlt
SetPixel
CreateDIBSection
SetRectRgn
GetMapMode
DPtoLP
CreateEllipticRgn
CreatePolygonRgn
Polyline
Ellipse
Polygon
Rectangle
RoundRect
CreatePalette
GetPaletteEntries
GetWindowOrgEx
PtInRegion
FillRgn
FrameRgn
GetBoundsRect
GetViewportOrgEx
LPtoDP
ExtFloodFill
SetPaletteEntries
GetNearestPaletteIndex
GetSystemPaletteEntries
EnumFontFamiliesExA
GetTextFaceA
SetPixelV
GetPixel
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
SelectObject
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
SetWindowOrgEx
ScaleViewportExtEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
DeleteDC
CreatePatternBrush
CreateCompatibleDC
GetStockObject
SelectPalette
GetObjectType
CreatePen
CreateSolidBrush
CreateHatchBrush
GetBkColor
GetRgnBox
OffsetRgn
CreateDIBitmap
CreateFontIndirectA
CreateCompatibleBitmap
StretchBlt
GetTextMetricsA
CreateRectRgnIndirect
GetTextColor
msimg32
TransparentBlt
AlphaBlend
comdlg32
GetFileTitleA
winspool.drv
OpenPrinterA
DocumentPropertiesA
ClosePrinter
comctl32
ImageList_GetIconSize
InitCommonControlsEx
oledlg
ord8
gdiplus
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromStream
GdipGetImagePalette
GdipBitmapUnlockBits
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipDisposeImage
GdipDeleteGraphics
GdipAlloc
GdipFree
GdiplusStartup
GdiplusShutdown
GdipGetImageGraphicsContext
GdipDrawImageI
GdipCloneImage
GdipGetImagePaletteSize
imm32
ImmGetOpenStatus
ImmReleaseContext
ImmGetContext
winmm
PlaySoundA
Sections
.text Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 268KB - Virtual size: 267KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 81KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 139KB - Virtual size: 139KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ