Static task
static1
Behavioral task
behavioral1
Sample
3094c41c7ec84949f39977d63a47da2f29d74b78a7f1565ab99cfc6d23befd30.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
3094c41c7ec84949f39977d63a47da2f29d74b78a7f1565ab99cfc6d23befd30.exe
Resource
win10v2004-20220812-en
General
-
Target
3094c41c7ec84949f39977d63a47da2f29d74b78a7f1565ab99cfc6d23befd30
-
Size
96KB
-
MD5
de722e1573ef7905353e8e97c75baebf
-
SHA1
36bd1ba4b99a310ebd2c1ba1c713526b02632072
-
SHA256
3094c41c7ec84949f39977d63a47da2f29d74b78a7f1565ab99cfc6d23befd30
-
SHA512
102fc6d2ea57e00324b851ce5fe22171212cd812e6b2f3c48bc3339a745213f221bd645a1c3a4f0c1fdce7290517c7c926b727268205ea3b8906db272665dbf4
-
SSDEEP
1536:PNnYUyY4LT4BjvkmLfFGVCHMobem7N8Jcb3OMyXc/1PszxJ9u7N00Hwn:VnYhRyjsmLfFECHjbp7yrBs/1PFN08U
Malware Config
Signatures
Files
-
3094c41c7ec84949f39977d63a47da2f29d74b78a7f1565ab99cfc6d23befd30.exe windows x86
90951ad4f147347060cc4e1133fbcd78
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
CloseHandle
SetFilePointer
FindNextFileW
GetProcAddress
SetLastError
WaitForMultipleObjects
InterlockedIncrement
FindNextChangeNotification
Sleep
WriteFile
GetCurrentThreadId
GetTickCount
GetDriveTypeW
GetLastError
GetLogicalDrives
GetUserDefaultLangID
MultiByteToWideChar
GetPrivateProfileStringW
ReadProcessMemory
QueryDosDeviceW
GetSystemTime
WaitForSingleObject
FindResourceExW
user32
LoadStringW
ReleaseDC
SetCursor
SetCursorPos
wsprintfW
WindowFromPoint
SetDlgItemTextW
MessageBoxW
GetCursorPos
DialogBoxParamW
FillRect
GetWindowRect
SetWindowPos
SystemParametersInfoW
GetMessageW
DrawTextW
TrackPopupMenu
gdi32
SetBkMode
DPtoLP
StretchBlt
CreateICW
CreateDCW
DeleteDC
MoveToEx
SetDIBits
GetObjectW
advapi32
RegNotifyChangeKeyValue
RegCreateKeyExW
InitializeSecurityDescriptor
RegSetValueExW
LookupAccountSidW
StartServiceW
Sections
.mcyh Size: 84KB - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.lqoebx Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.stma Size: 4KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE