Static task
static1
Behavioral task
behavioral1
Sample
3f412defc4b07aa1b5dd5b5cd14f87f01b1bba062b8675ed45d63445c7cd8003.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
3f412defc4b07aa1b5dd5b5cd14f87f01b1bba062b8675ed45d63445c7cd8003.exe
Resource
win10v2004-20220812-en
General
-
Target
3f412defc4b07aa1b5dd5b5cd14f87f01b1bba062b8675ed45d63445c7cd8003
-
Size
4.6MB
-
MD5
d39a0abc7f27056596aedcbc76679ee4
-
SHA1
75bef98cdb5e27ac2557c7440d0b150ec206273a
-
SHA256
3f412defc4b07aa1b5dd5b5cd14f87f01b1bba062b8675ed45d63445c7cd8003
-
SHA512
60df5f500e2cd49cae0dd662912c5044a4b46d7f3209b3a299df10b721a948b9cce4907dc2ec6eb93c5813806e89f35f7d6b743aa2e9575aaf8e2b284e97097f
-
SSDEEP
98304:ukymtZI3nwKykQ2Yh+DHv2GwIIZRZhd9IT7wfS/gKg4nVr8QkcfE8Q:ZylXjy40W2GwIEzQwabg4nVDk91
Malware Config
Signatures
Files
-
3f412defc4b07aa1b5dd5b5cd14f87f01b1bba062b8675ed45d63445c7cd8003.exe windows x86
f59bd0383e2639a3d930d7bfa21bf0f3
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteFileW
GetLastError
LocalAlloc
LocalFree
Sleep
GetTickCount
HeapAlloc
GetProcessHeap
HeapFree
WideCharToMultiByte
FindFirstFileW
MoveFileExW
FindNextFileW
FindClose
RemoveDirectoryW
CreateProcessW
WaitForSingleObject
GetSystemDefaultLangID
GetTempPathA
DeleteFileA
GetFileAttributesW
GetTempPathW
FreeResource
GetCurrentProcessId
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
SetFilePointer
ReadFile
SystemTimeToFileTime
GetCurrentDirectoryW
LocalFileTimeToFileTime
WriteFile
SetFileTime
GetFullPathNameW
GetModuleFileNameW
SizeofResource
LockResource
LoadResource
FindResourceW
GetCurrentProcess
GetModuleHandleW
GetProcAddress
GlobalFree
DeviceIoControl
GlobalAlloc
CreateFileW
SetEnvironmentVariableA
GetTimeZoneInformation
GetDriveTypeW
FindFirstFileExW
FileTimeToSystemTime
GetFileInformationByHandle
FileTimeToLocalFileTime
ExitThread
CreateThread
CloseHandle
GetVolumeInformationW
MultiByteToWideChar
CreateDirectoryW
GetPrivateProfileStringW
ExpandEnvironmentStringsA
LoadLibraryA
WaitForMultipleObjects
PeekNamedPipe
FormatMessageA
VerifyVersionInfoA
SleepEx
VerSetConditionMask
InitializeCriticalSection
SetEndOfFile
LCMapStringW
CompareStringW
LoadLibraryW
OutputDebugStringW
WriteConsoleW
HeapReAlloc
SetStdHandle
GetStringTypeW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetCurrentThreadId
EncodePointer
DecodePointer
InterlockedDecrement
ExitProcess
GetModuleHandleExW
AreFileApisANSI
IsDebuggerPresent
IsProcessorFeaturePresent
GetCommandLineW
RaiseException
RtlUnwind
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
GetConsoleMode
ReadConsoleW
HeapSize
SetFilePointerEx
GetStdHandle
GetFileType
DeleteCriticalSection
GetStartupInfoW
FlushFileBuffers
GetConsoleCP
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
InterlockedIncrement
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
user32
wsprintfW
advapi32
CryptAcquireContextA
CryptGetHashParam
CryptCreateHash
CryptHashData
CryptDestroyHash
QueryServiceStatusEx
ControlService
EnumDependentServicesW
DeleteService
QueryServiceConfigW
CloseServiceHandle
OpenServiceW
OpenSCManagerW
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
CryptReleaseContext
ws2_32
listen
accept
sendto
recvfrom
ioctlsocket
getaddrinfo
WSAIoctl
socket
setsockopt
ntohs
htons
getsockopt
getsockname
getpeername
connect
closesocket
bind
send
recv
WSASetLastError
select
__WSAFDIsSet
WSAGetLastError
WSACleanup
WSAStartup
gethostname
freeaddrinfo
wldap32
ord200
ord30
ord79
ord35
ord33
ord32
ord301
ord26
ord41
ord50
ord60
ord211
ord46
ord143
ord27
ord22
Sections
.text Size: 322KB - Virtual size: 322KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 35KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ