Static task
static1
Behavioral task
behavioral1
Sample
3d659b2e83f037fa12a1be543354c7e5fd4dc3052ff9ad29ea53580d3f83a1ff.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
3d659b2e83f037fa12a1be543354c7e5fd4dc3052ff9ad29ea53580d3f83a1ff.exe
Resource
win10v2004-20220901-en
General
-
Target
3d659b2e83f037fa12a1be543354c7e5fd4dc3052ff9ad29ea53580d3f83a1ff
-
Size
200KB
-
MD5
6a2b39054095afb38c30f0ab098e9e18
-
SHA1
a5826f60c7ae4e98102c955e86db19c5ab5f378e
-
SHA256
3d659b2e83f037fa12a1be543354c7e5fd4dc3052ff9ad29ea53580d3f83a1ff
-
SHA512
438f9e009701661c35ff5702d637cd844482320a789f6658ebe76ad44f5976daa7396a480f9b26046835e798fb08149864ae42de3b4689e25132dd55431916ba
-
SSDEEP
3072:u61YKvyy18bpXxfUUEofbXettbk/e7PBDrC8vqsFNZu5N1d:/ydgof7WbzrBDrCVeU
Malware Config
Signatures
Files
-
3d659b2e83f037fa12a1be543354c7e5fd4dc3052ff9ad29ea53580d3f83a1ff.exe windows x86
2be4fbcf12fb2786317f157173bd12fc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
hccutils
LoadSTRING
LoadIMAGE
LoadBITMAP
kernel32
MultiByteToWideChar
WideCharToMultiByte
lstrlenW
RaiseException
InitializeCriticalSection
DeleteCriticalSection
InterlockedIncrement
lstrlenA
lstrcmpiA
GetModuleFileNameA
IsDBCSLeadByte
SizeofResource
LoadResource
FindResourceA
LoadLibraryExA
CreateMutexA
GetCurrentThreadId
GetCommandLineA
GetStringTypeW
GetStringTypeA
GetSystemTimeAsFileTime
GetModuleHandleA
QueryPerformanceCounter
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
HeapSize
Sleep
GetStdHandle
WriteFile
HeapCreate
HeapDestroy
VirtualFree
ExitProcess
LCMapStringW
LCMapStringA
SetLastError
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetOEMCP
InterlockedDecrement
CreateEventA
GetLastError
CloseHandle
GetVersionExA
LoadLibraryA
FreeLibrary
GetCurrentProcessId
GetProcAddress
SetFilePointer
GetConsoleCP
GetTickCount
GetCPInfo
GetStartupInfoA
GetProcessHeap
HeapReAlloc
FlushFileBuffers
CreateFileA
VirtualQuery
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetConsoleMode
GetSystemInfo
VirtualAlloc
VirtualProtect
HeapFree
HeapAlloc
RtlUnwind
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
EnterCriticalSection
LeaveCriticalSection
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
LocalFree
TerminateProcess
user32
SetTimer
GetDC
GetSystemMetrics
ReleaseDC
PostQuitMessage
KillTimer
CreatePopupMenu
AppendMenuA
DestroyWindow
TrackPopupMenu
DestroyIcon
RegisterClassA
CreateWindowExA
RegisterWindowMessageA
GetMessageA
DispatchMessageA
DefWindowProcA
DestroyMenu
FindWindowA
SetWindowLongA
PostThreadMessageA
CharNextA
GetCursorPos
GetWindowLongA
PostMessageA
UnregisterClassA
SetForegroundWindow
gdi32
GetDIBits
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
SetBkColor
BitBlt
SetTextColor
DeleteDC
DeleteObject
advapi32
RegEnumKeyExA
RegQueryInfoKeyA
RegSetValueExA
RegCreateKeyExA
RegDeleteValueA
RegDeleteKeyA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
shell32
Shell_NotifyIconA
ole32
CoCreateInstance
CoSuspendClassObjects
StringFromGUID2
CoRevokeClassObject
CoTaskMemRealloc
CoTaskMemAlloc
CoUninitialize
CoInitialize
CLSIDFromProgID
CoTaskMemFree
CoRegisterClassObject
oleaut32
VarUI4FromStr
RegisterTypeLi
UnRegisterTypeLi
LoadTypeLi
SysAllocString
SysStringLen
SysFreeString
SysStringByteLen
SysAllocStringByteLen
VariantClear
Sections
.text Size: 88KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 20KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 72KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
uhjndpx Size: - Virtual size: 72KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE