Static task
static1
Behavioral task
behavioral1
Sample
a3cab388b68f0526dfd34020d9aedd20898f51de96fb0030d4baaaf809e6b43e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a3cab388b68f0526dfd34020d9aedd20898f51de96fb0030d4baaaf809e6b43e.exe
Resource
win10v2004-20220812-en
General
-
Target
a3cab388b68f0526dfd34020d9aedd20898f51de96fb0030d4baaaf809e6b43e
-
Size
400KB
-
MD5
12617d537dba49b436989c2c530b1c58
-
SHA1
ad3a386a1f6c69dcfd30dd610d8b5344caa1db3b
-
SHA256
a3cab388b68f0526dfd34020d9aedd20898f51de96fb0030d4baaaf809e6b43e
-
SHA512
23eb3728cd45e6de3a49ce182a4ecf055a4dd4fd8331c4f33958e38d11d15d923c925b57625fb18a4acfc4961031e8a141b435ab0731dab8f9592437d498ae09
-
SSDEEP
6144:sTqvzRk68U5MVABH891PvFm8BMYES1ynnrvRKSVh136wE:s2VX5MVX91XFZW3S1ynnrvY833
Malware Config
Signatures
Files
-
a3cab388b68f0526dfd34020d9aedd20898f51de96fb0030d4baaaf809e6b43e.exe windows x86
fe20e35ff10a90519692bb3402ad6a8f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CompareStringW
CreateDirectoryW
CreateEventW
CreateFileW
CreateMutexW
CreateProcessW
CreateThread
DeleteCriticalSection
DeleteFileW
DisableThreadLibraryCalls
EnterCriticalSection
ExpandEnvironmentStringsW
FileTimeToSystemTime
FindClose
FindFirstFileW
FindNextFileW
FreeLibrary
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetDriveTypeW
GetExitCodeProcess
GetExitCodeThread
GetFileSize
GetFileTime
GetFileType
GetLocalTime
GetLocaleInfoW
GetPrivateProfileStringW
GetProcAddress
GetProcessHeap
GetSystemInfo
GetSystemTime
GetSystemTimeAsFileTime
GetTickCount
GetUserDefaultLangID
GetVersionExW
GetVolumeInformationW
CompareStringA
GlobalFree
HeapAlloc
HeapFree
HeapReAlloc
InitializeCriticalSection
InterlockedCompareExchange
InterlockedDecrement
InterlockedExchange
InterlockedIncrement
LeaveCriticalSection
LoadLibraryExW
LocalFree
MapViewOfFile
MoveFileW
MultiByteToWideChar
QueryPerformanceCounter
ReadFile
ReleaseMutex
RemoveDirectoryW
ResetEvent
SetEndOfFile
SetEvent
SetFileAttributesW
SetFilePointer
SetFileTime
SetUnhandledExceptionFilter
Sleep
SystemTimeToFileTime
UnhandledExceptionFilter
UnmapViewOfFile
WaitForMultipleObjects
WaitForSingleObject
WideCharToMultiByte
WriteFile
lstrcmpW
lstrcmpiW
lstrcpynW
lstrlenA
lstrlenW
CompareFileTime
GlobalAlloc
CloseHandle
user32
TranslateMessage
SendMessageW
PostMessageW
PeekMessageW
MsgWaitForMultipleObjects
GetWindowThreadProcessId
GetKeyboardType
GetActiveWindow
ExitWindowsEx
DispatchMessageW
CharUpperA
CharNextW
CharLowerA
CharUpperW
shell32
SHGetMalloc
SHGetFolderPathW
SHGetPathFromIDListW
ShellExecuteW
SHBrowseForFolderW
wininet
InternetCrackUrlW
InternetGetConnectedState
InternetQueryOptionA
InternetCanonicalizeUrlW
ole32
CoTaskMemFree
CoUninitialize
HMETAFILE_UserFree
CoTaskMemAlloc
CoInitialize
crypt32
CertGetCertificateContextProperty
CryptHashPublicKeyInfo
setupapi
SetupScanFileQueueW
SetupOpenInfFileW
SetupOpenFileQueue
SetupGetStringFieldW
SetupFindFirstLineW
SetupDiSetSelectedDriverW
SetupDiSetDeviceInstallParamsW
SetupDiOpenDeviceInfoW
SetupDiOpenDevRegKey
SetupDiInstallDriverFiles
SetupDiGetDriverInstallParamsW
SetupDiGetDeviceRegistryPropertyW
SetupDiGetDeviceInstanceIdW
SetupDiGetDeviceInstallParamsW
SetupDiGetClassDevsW
SetupDiEnumDriverInfoW
SetupDiEnumDeviceInfo
SetupDiDestroyDeviceInfoList
SetupDiCreateDeviceInfoList
SetupDiBuildDriverInfoList
SetupCloseInfFile
SetupCloseFileQueue
CM_Locate_DevNodeW
CM_Get_DevNode_Status
CM_Get_DevNode_Registry_PropertyW
shlwapi
PathIsRootW
PathIsRelativeW
PathFindExtensionW
PathIsUNCW
StrToIntExW
StrStrIW
StrRChrW
PathRemoveBackslashW
PathStripToRootW
StrChrW
StrCmpW
StrCmpIW
UrlGetPartW
oleaut32
VariantInit
VariantClear
VarR8FromI1
SysStringLen
SysFreeString
SysAllocString
Sections
.text Size: 296KB - Virtual size: 296KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ