Static task
static1
Behavioral task
behavioral1
Sample
3abe31f60557ede857f7e0967fe506d88dbeb42d04c82f568e5dcefabd650d03.exe
Resource
win7-20220812-en
General
-
Target
3abe31f60557ede857f7e0967fe506d88dbeb42d04c82f568e5dcefabd650d03
-
Size
120KB
-
MD5
85dc9df653615354ce0fb11d51816be0
-
SHA1
28836cd14dc235c04b99a1c4d00e03eaf5dd433e
-
SHA256
3abe31f60557ede857f7e0967fe506d88dbeb42d04c82f568e5dcefabd650d03
-
SHA512
d4ba26405111aa1be47fcf0dfc3faa41cda32e9edf45f9a2fe07a4785acc65f058d89d838c808fa91eba81cbcc156dc1085b95f4dbbaa1ecf587b354eae27ee5
-
SSDEEP
1536:SWE0dBfAczxUMYmYuuf0EbI/kDYTbPtokZ0WxFmx4HTrnTjqaxTV:3E0bJmMKuuffbLDgSs0CDaITV
Malware Config
Signatures
Files
-
3abe31f60557ede857f7e0967fe506d88dbeb42d04c82f568e5dcefabd650d03.exe windows x86
87b013eed67fb388074cb4568e422d9a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleFileNameA
GetTickCount
FormatMessageA
SetFileTime
GetCurrentProcessId
GlobalWire
lstrcatA
GetCurrentThreadId
ReadFile
_lopen
FindNextFileA
CreateDirectoryA
_llseek
lstrcpyA
SetFilePointer
lstrcpynA
GetSystemInfo
SizeofResource
GetProcAddress
LoadLibraryExA
CloseHandle
IsDBCSLeadByte
FindClose
EnumResourceTypesA
GetTempFileNameA
GetVersionExA
TerminateThread
WriteFile
FreeResource
GlobalLock
LocalAlloc
FindResourceA
SetUnhandledExceptionFilter
LocalFree
FindFirstFileA
DeleteFileA
CreateEventA
GlobalUnlock
SetCurrentDirectoryA
FreeLibrary
LockResource
CreateFileA
GetShortPathNameA
lstrcmpiA
GetVolumeInformationA
GetCommandLineA
GetCurrentDirectoryA
GetFileAttributesA
GetExitCodeProcess
CreateProcessA
LoadResource
GetCurrentProcess
GetStartupInfoA
GetTempPathA
GetWindowsDirectoryA
GetLastError
GetModuleHandleA
CreateMutexA
RemoveDirectoryA
SetFileAttributesA
SetEvent
ExitProcess
_lclose
lstrcmpA
UnhandledExceptionFilter
ResetEvent
GlobalAlloc
GetDiskFreeSpaceA
MulDiv
GetDriveTypeA
GlobalFree
lstrlenA
GetSystemDirectoryA
version
GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA
user32
CharNextA
GetDlgItem
GetDesktopWindow
EnableWindow
CharUpperA
GetWindowLongA
CharPrevA
MessageBeep
DispatchMessageA
wsprintfA
SetWindowPos
ExitWindowsEx
GetWindowRect
CallWindowProcA
SetWindowLongA
SendMessageA
ShowWindow
EndDialog
GetDlgItemTextA
SetWindowTextA
MessageBoxA
SetDlgItemTextA
PeekMessageA
LoadStringA
GetSystemMetrics
gdi32
GetDeviceCaps
advapi32
RegSetValueExA
RegQueryValueExA
FreeSid
OpenProcessToken
GetTokenInformation
AdjustTokenPrivileges
RegDeleteValueA
EqualSid
RegCloseKey
RegOpenKeyExA
RegCreateKeyExA
RegQueryInfoKeyA
Sections
.text Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 6KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rxdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.pdata Size: 100KB - Virtual size: 168KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE