Static task
static1
Behavioral task
behavioral1
Sample
f3a7e3e8cca647d0d901f03f101d159ba78820b29515d62d605a06a507aad6c9.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f3a7e3e8cca647d0d901f03f101d159ba78820b29515d62d605a06a507aad6c9.exe
Resource
win10v2004-20221111-en
General
-
Target
f3a7e3e8cca647d0d901f03f101d159ba78820b29515d62d605a06a507aad6c9
-
Size
404KB
-
MD5
7ddc8bcf05fd9c25f34fb00af24dc087
-
SHA1
c895a4cb06f2ae6df23472d1e8d2eea8eda01608
-
SHA256
f3a7e3e8cca647d0d901f03f101d159ba78820b29515d62d605a06a507aad6c9
-
SHA512
8788e656a78bba5da397b25effdac8a08e50176248b0ed2226039dafe281468fc1830ab79022840a64dc9d8626a68b1b234533dd35f5debeedc5206855a2a5bb
-
SSDEEP
6144:lbdPZw+89e6l0nXU9+sjPDOXfIDOT3mcDAUXQFYLQ6JOkoleysY:lJPwzlssOXNhM/FYLQIOkoleysY
Malware Config
Signatures
Files
-
f3a7e3e8cca647d0d901f03f101d159ba78820b29515d62d605a06a507aad6c9.exe windows x86
1ee91425fb94df6db4a7078d48b59619
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
DdeAccessData
GetOpenClipboardWindow
SetWindowPlacement
LoadAcceleratorsA
GetWindow
CreateWindowExA
SendIMEMessageExW
ShowWindow
SetWindowWord
HideCaret
GetDlgItemTextW
GetScrollBarInfo
SendMessageTimeoutW
LockWindowUpdate
DlgDirSelectExW
CreateAcceleratorTableW
CreatePopupMenu
EqualRect
SetProcessDefaultLayout
CloseDesktop
ScreenToClient
SetMessageQueue
CharToOemW
RegisterClipboardFormatW
GetThreadDesktop
EnumDisplayDevicesW
DestroyWindow
GetMessageW
FreeDDElParam
DrawTextA
SetWindowsHookA
CreateAcceleratorTableA
WINNLSGetIMEHotkey
GetMessageExtraInfo
SetUserObjectInformationW
GetFocus
DialogBoxIndirectParamW
ScrollWindowEx
SystemParametersInfoA
DefWindowProcW
CopyImage
GetCursorInfo
PtInRect
GetTabbedTextExtentW
GetComboBoxInfo
SetDlgItemInt
MessageBeep
FlashWindow
EndDeferWindowPos
MessageBoxW
EnumDisplaySettingsW
RealChildWindowFromPoint
LoadKeyboardLayoutW
DefWindowProcA
CloseWindowStation
PeekMessageW
WINNLSGetEnableStatus
GetDoubleClickTime
GetMenuItemID
TileWindows
IsCharUpperW
TranslateMDISysAccel
GetKBCodePage
LoadStringA
GetClipboardOwner
RegisterClassW
ReplyMessage
RegisterWindowMessageW
GetMenuCheckMarkDimensions
SetActiveWindow
IsCharAlphaNumericW
GetCapture
SendDlgItemMessageW
RegisterClassA
CreateDialogParamA
CreateMDIWindowW
DefDlgProcW
CallMsgFilterW
LookupIconIdFromDirectory
ChildWindowFromPoint
UnhookWindowsHook
TranslateAcceleratorA
ArrangeIconicWindows
ChildWindowFromPointEx
EnableScrollBar
DefDlgProcA
OpenClipboard
PackDDElParam
DlgDirSelectExA
IsDialogMessageA
wvsprintfW
CopyAcceleratorTableA
CallMsgFilter
SetWindowContextHelpId
LoadCursorFromFileW
DefMDIChildProcA
GetDlgItem
SetDoubleClickTime
IsClipboardFormatAvailable
InsertMenuA
GetWindowModuleFileNameW
RegisterClassExA
DragObject
SetClassLongA
comdlg32
ChooseFontA
FindTextW
GetFileTitleA
kernel32
LoadLibraryA
GetModuleFileNameW
GetStartupInfoA
RtlUnwind
WriteConsoleW
WriteFile
SetStdHandle
CloseHandle
VirtualAlloc
GetUserDefaultLCID
VirtualQuery
GetConsoleOutputCP
CreateWaitableTimerW
ReadFile
GetCurrentProcessId
ExitProcess
InitializeCriticalSection
EnumSystemLocalesA
GetSystemTimeAsFileTime
SetEnvironmentVariableA
GetStringTypeA
GetProcAddress
FreeEnvironmentStringsA
VirtualFree
HeapDestroy
TlsSetValue
GetNumberFormatW
IsValidLocale
GetConsoleMode
SetConsoleCtrlHandler
GetCPInfo
SetFilePointer
SetHandleCount
IsValidCodePage
UnhandledExceptionFilter
GetOEMCP
TlsGetValue
WideCharToMultiByte
EnterCriticalSection
GetVersionExA
LeaveCriticalSection
GetTimeFormatA
FreeEnvironmentStringsW
GetCurrentThread
GetLocaleInfoW
GetConsoleCP
CompareStringW
GetLocaleInfoA
TerminateProcess
QueryPerformanceCounter
OpenMutexA
MultiByteToWideChar
InterlockedDecrement
GetStdHandle
GetLastError
InterlockedIncrement
Sleep
GetModuleFileNameA
GetCommandLineW
InterlockedExchange
GetCurrentProcess
DeleteCriticalSection
GetProcessHeap
IsDebuggerPresent
GetCurrentThreadId
GetStartupInfoW
DuplicateHandle
SetUnhandledExceptionFilter
SetLastError
HeapCreate
LCMapStringW
GetStringTypeW
CreateMutexA
GetDateFormatA
HeapFree
TlsFree
GetTimeZoneInformation
CompareStringA
HeapSize
TlsAlloc
HeapReAlloc
GetEnvironmentStrings
HeapAlloc
FlushFileBuffers
GetCommandLineA
GetModuleHandleA
GetEnvironmentStringsW
GetTickCount
WriteConsoleA
GetFileType
FreeLibrary
LCMapStringA
CreateFileA
GetACP
comctl32
ImageList_SetDragCursorImage
ImageList_EndDrag
ImageList_GetFlags
ImageList_AddIcon
CreateToolbarEx
InitCommonControlsEx
ImageList_GetImageCount
ImageList_GetDragImage
ImageList_Merge
ImageList_LoadImageA
CreateUpDownControl
ImageList_GetBkColor
CreatePropertySheetPageA
ImageList_GetImageRect
ImageList_Duplicate
ImageList_DragLeave
ImageList_SetImageCount
GetEffectiveClientRect
ImageList_DrawIndirect
shell32
SHGetDataFromIDListW
wininet
InternetConfirmZoneCrossing
RetrieveUrlCacheEntryFileA
GopherFindFirstFileW
CreateUrlCacheGroup
advapi32
RegOpenKeyW
RegReplaceKeyA
RegCloseKey
CryptHashData
CryptContextAddRef
CryptVerifySignatureA
Sections
.text Size: 184KB - Virtual size: 180KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 76KB - Virtual size: 75KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 96KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 44KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ