Static task
static1
Behavioral task
behavioral1
Sample
3F5D43765B9861EF7FB6934E4F3BC696.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
3F5D43765B9861EF7FB6934E4F3BC696.exe
Resource
win10v2004-20220812-en
General
-
Target
3F5D43765B9861EF7FB6934E4F3BC696.exe
-
Size
343KB
-
MD5
3f5d43765b9861ef7fb6934e4f3bc696
-
SHA1
06fcd3e560876ad05f2f582f91547a04bff829f1
-
SHA256
eed98c3dd55f27a2be5b8541b4855244fb065ade41ded068ab1317c776a09688
-
SHA512
f9125a3a044f57bf4f3d169afcec97df7290fc2898aa2732c0e8b5afb2a5aa7099067f9e96e4644b6e0ffc5206c100654406baa7005b7071aaf9975d37c519aa
-
SSDEEP
3072:DQ8Jstxp5/YDHh8fzYQYwRVyv6MIWoy+hdEdZTpDbexB7sg+Rhtk7v:UBxpkhFQt4v67oA6rgsrIL
Malware Config
Signatures
Files
-
3F5D43765B9861EF7FB6934E4F3BC696.exe.exe windows x86
0be9d92ae0898f1d675bda3e22f16b55
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentDirectoryW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetDateFormatW
GetFileAttributesExW
GetFileAttributesW
GetFileSize
GetFullPathNameW
GetLastError
GetModuleHandleA
GetProcessHeap
GetShortPathNameW
GetStartupInfoA
GetSystemDirectoryW
GetSystemInfo
GetSystemTimeAsFileTime
GetTickCount
GetTimeFormatW
GetCommandLineW
GetWindowsDirectoryW
HeapAlloc
HeapFree
LocalFree
MulDiv
QueryPerformanceCounter
SetCurrentDirectoryW
SetEndOfFile
SetFilePointer
SetUnhandledExceptionFilter
SystemTimeToFileTime
TerminateProcess
UnhandledExceptionFilter
WriteFile
lstrcatW
lstrcmpW
lstrcpyW
lstrlenW
FormatMessageW
FlushFileBuffers
FindNextFileW
FindFirstFileW
VirtualAllocEx
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
DeleteFileW
CreateThread
CreateFileW
CompareStringW
CompareFileTime
CloseHandle
Sleep
GetModuleHandleW
GetVersionExW
user32
IsDlgButtonChecked
LoadCursorW
LoadIconW
LoadStringW
MessageBoxW
MoveWindow
PostMessageW
RegisterClassW
ScreenToClient
SendMessageW
SetClassLongW
SetDlgItemTextW
SetFocus
SetForegroundWindow
SetWindowLongW
ShowWindow
InvalidateRect
wsprintfW
GetDlgItem
GetClientRect
FindWindowW
EndPaint
EndDialog
EnableWindow
DialogBoxParamW
DestroyWindow
DestroyIcon
DefWindowProcW
CreateWindowExW
ChildWindowFromPoint
CheckDlgButton
CharUpperBuffW
GetWindowRect
GetWindowLongW
GetSysColor
GetParent
WinHelpW
GetDlgItemTextW
CharLowerBuffW
BeginPaint
CheckRadioButton
gdi32
SetTextAlign
SetBkColor
SelectObject
GetTextExtentPoint32W
SetTextColor
ExtTextOutW
advapi32
RegOpenKeyA
RegSetValueExW
RegOpenKeyW
RegCreateKeyExW
RegCloseKey
RegQueryValueExW
shell32
SHGetFileInfoW
SHGetPathFromIDListW
SHGetSpecialFolderLocation
ShellExecuteW
SHBrowseForFolderW
comctl32
CreateStatusWindowW
PropertySheetW
winmm
timeGetTime
msvcrt
_XcptFilter
__getmainargs
__p__commode
__p__fmode
__set_app_type
__setusermatherr
_acmdln
_adjust_fdiv
_c_exit
_cexit
_controlfp
_except_handler3
_exit
_initterm
_wcsicmp
_wcsnicmp
exit
wcschr
wcsstr
Sections
.text Size: 162KB - Virtual size: 161KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.xF1 Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 82KB - Virtual size: 82KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xF1 Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xF2 Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 720B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ