Static task
static1
Behavioral task
behavioral1
Sample
3920263a356e7e46f8ab22a4e66c32e47abe595fcc12094c382b35a80367a1e4.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
3920263a356e7e46f8ab22a4e66c32e47abe595fcc12094c382b35a80367a1e4.exe
Resource
win10v2004-20220812-en
General
-
Target
3920263a356e7e46f8ab22a4e66c32e47abe595fcc12094c382b35a80367a1e4
-
Size
2.7MB
-
MD5
929e273df39203b88fc0c897b504472f
-
SHA1
ee35a79bdbefee34312f7f237f8688c97222df5f
-
SHA256
3920263a356e7e46f8ab22a4e66c32e47abe595fcc12094c382b35a80367a1e4
-
SHA512
e446b401ae3a4fe30548b1712d5bd2c2932c09101562e40164994b2a476b598fb2fdb31e6273659e646cea3b827c83643120516fdfdb06b6216a4ae6ab81e2db
-
SSDEEP
12288:elIWrmkJpUt/3HrRz1t1DdlIReHex/f3OmZ:otUtbDdlIReHo35
Malware Config
Signatures
Files
-
3920263a356e7e46f8ab22a4e66c32e47abe595fcc12094c382b35a80367a1e4.exe windows x86
d999adf28032d6114a1d642704bbf92a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryExA
LoadResource
SizeofResource
lstrcmpiA
FindResourceA
MultiByteToWideChar
WideCharToMultiByte
IsDBCSLeadByte
GetCommandLineA
CloseHandle
SetEvent
WaitForSingleObject
CreateEventA
CreateThread
GetCurrentThreadId
GetSystemInfo
VirtualAlloc
GetModuleHandleW
FreeConsole
SwitchToThread
TerminateJobObject
GetModuleHandleA
UnhandledExceptionFilter
UnlockFileEx
CreateFileW
SetFilePointerEx
GetConsoleMode
GetConsoleCP
FlushFileBuffers
GetStringTypeW
SetStdHandle
SetConsoleCtrlHandler
GetProcessHeap
SetEnvironmentVariableW
SetEnvironmentVariableA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCPInfo
GetOEMCP
IsValidCodePage
FindNextFileW
FindNextFileA
FindFirstFileExW
FindFirstFileExA
GetModuleFileNameA
FreeLibrary
Sleep
DeleteCriticalSection
InitializeCriticalSectionEx
LeaveCriticalSection
EnterCriticalSection
GetLastError
RaiseException
TransactNamedPipe
DecodePointer
FindClose
GetFileType
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
OutputDebugStringA
HeapReAlloc
HeapSize
WriteConsoleW
HeapAlloc
HeapFree
GetCurrentThread
GetACP
WriteFile
GetStdHandle
GetModuleFileNameW
ExitProcess
GetModuleHandleExW
FreeLibraryAndExitThread
IsDebuggerPresent
OutputDebugStringW
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeSListHead
RtlUnwind
InterlockedPushEntrySList
InterlockedFlushSList
SetLastError
EncodePointer
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
VirtualProtect
VirtualQuery
ExitThread
ResumeThread
user32
CharNextA
RegisterWindowMessageA
GetMessageA
GetMessageW
TranslateMessage
DispatchMessageA
DispatchMessageW
PeekMessageA
PostThreadMessageA
CharUpperA
CharNextW
UnregisterClassA
MsgWaitForMultipleObjectsEx
IsWindowUnicode
GetThreadDesktop
DefWindowProcW
CloseWindowStation
CloseDesktop
AllowSetForegroundWindow
advapi32
GetTokenInformation
RegQueryInfoKeyA
RegSetValueExA
RegQueryInfoKeyW
RegOpenKeyExA
RegEnumKeyExA
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyExA
RegCloseKey
ole32
CoTaskMemAlloc
CoTaskMemFree
CoUninitialize
CoRegisterClassObject
CoRevokeClassObject
CoResumeClassObjects
CoAddRefServerProcess
CoReleaseServerProcess
CoMarshalInterThreadInterfaceInStream
CoGetInterfaceAndReleaseStream
CoCreateInstance
StringFromGUID2
CoTaskMemRealloc
CoInitialize
oleaut32
UnRegisterTypeLi
RegisterTypeLi
SysAllocString
LoadRegTypeLi
LoadTypeLi
VarUI4FromStr
SysStringLen
SysFreeString
Sections
.text Size: 296KB - Virtual size: 295KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 50KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2.3MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ