Static task
static1
Behavioral task
behavioral1
Sample
3400677141ac52b2339b1481eab4546646c4a16b2d97b33520763881ecfa1986.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
3400677141ac52b2339b1481eab4546646c4a16b2d97b33520763881ecfa1986.exe
Resource
win10v2004-20221111-en
General
-
Target
3400677141ac52b2339b1481eab4546646c4a16b2d97b33520763881ecfa1986
-
Size
102KB
-
MD5
8928f241a06118e723ef16a2ceff1d1e
-
SHA1
67f7f474ad354c08b9aa75481f09281a8dc41f01
-
SHA256
3400677141ac52b2339b1481eab4546646c4a16b2d97b33520763881ecfa1986
-
SHA512
6f244ef74d01bed1f039893f82ebac3979ac9ea604796f047a4a6a5ffdc5ec3f4512e02b8d86579c05e7e864707e4df03b27dab94de0078c743152e1e3f2a88f
-
SSDEEP
1536:Bd80+kDtFxFbCvJizF3CT1AK8sIdMFVzuqVq777W77L7777777777OU77Y77t87T:BlDnxFbg6MT3I+FVzucaa
Malware Config
Signatures
Files
-
3400677141ac52b2339b1481eab4546646c4a16b2d97b33520763881ecfa1986.exe windows x86
3c43f0ce1433dfe5419edd672b2600f3
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
urlmon
URLDownloadToCacheFileA
wininet
InternetOpenA
InternetCanonicalizeUrlA
InternetOpenUrlA
DeleteUrlCacheEntry
gdiplus
GdipCloneImage
GdipGetImageWidth
GdipDrawImageRectI
GdipGetImageHeight
GdipCreateFromHDC
GdipDisposeImage
GdipAlloc
GdipFree
GdiplusStartup
GdipLoadImageFromStream
GdipDeleteGraphics
uxtheme
OpenThemeData
CloseThemeData
IsThemeActive
comctl32
InitCommonControlsEx
kernel32
GetStringTypeW
FreeEnvironmentStringsW
DeleteCriticalSection
GetConsoleMode
GetConsoleCP
GetSystemTimeAsFileTime
GetCurrentProcessId
HeapSize
lstrlenA
GetLastError
FormatMessageA
LocalFree
FindResourceA
LoadResource
LockResource
WideCharToMultiByte
CreateMutexA
VerSetConditionMask
VerifyVersionInfoA
GetVersionExA
LoadLibraryA
GetProcAddress
FreeLibrary
GetCurrentProcess
GetModuleFileNameA
CloseHandle
SizeofResource
GlobalAlloc
GlobalLock
GlobalUnlock
FreeResource
Sleep
GetVersion
CreateProcessA
GetExitCodeProcess
MultiByteToWideChar
GetFileType
SetHandleCount
SetFilePointer
RtlUnwind
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
LCMapStringW
GetModuleFileNameW
GetStdHandle
WriteFile
ExitProcess
HeapCreate
IsProcessorFeaturePresent
GetCurrentThreadId
SetLastError
GetEnvironmentStringsW
GetModuleHandleW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
IsValidCodePage
GetOEMCP
GetACP
InterlockedDecrement
InterlockedIncrement
GetCPInfo
EncodePointer
DecodePointer
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RaiseException
GetStartupInfoW
HeapSetInformation
GetCommandLineA
HeapAlloc
HeapFree
QueryPerformanceCounter
LoadLibraryW
SetStdHandle
WriteConsoleW
FlushFileBuffers
HeapReAlloc
TerminateProcess
CreateFileW
GetTickCount
user32
DrawTextA
DestroyWindow
DispatchMessageA
TranslateMessage
IsDialogMessageA
PeekMessageA
SetFocus
SetForegroundWindow
SetDlgItemTextA
MoveWindow
SetWindowTextA
CreateDialogParamA
GetSystemMetrics
SystemParametersInfoA
GetWindowRect
SetWindowLongA
GetWindowLongA
MsgWaitForMultipleObjects
EndPaint
BeginPaint
IsWindowVisible
SetCursor
GetDlgItem
LoadIconA
SetTimer
KillTimer
ReleaseDC
UpdateWindow
InvalidateRect
SendMessageA
FillRect
GetClientRect
GetDC
IsWindow
MessageBoxA
LoadStringA
CharPrevA
ShowWindow
LoadCursorA
gdi32
DeleteDC
DeleteObject
BitBlt
CreateFontIndirectA
SelectObject
CreateCompatibleBitmap
CreateCompatibleDC
SetBkMode
CreateSolidBrush
advapi32
FreeSid
AllocateAndInitializeSid
shell32
Shell_NotifyIconA
ole32
CreateStreamOnHGlobal
netapi32
Netbios
Sections
.text Size: 49KB - Virtual size: 49KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 55KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ