Static task
static1
Behavioral task
behavioral1
Sample
a3730f0ded9ff00aa73a1cdd9d2493641882e4667046e1e60908e36b1470a95f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a3730f0ded9ff00aa73a1cdd9d2493641882e4667046e1e60908e36b1470a95f.exe
Resource
win10v2004-20221111-en
General
-
Target
a3730f0ded9ff00aa73a1cdd9d2493641882e4667046e1e60908e36b1470a95f
-
Size
212KB
-
MD5
4d4abee970362fe3982e5f765e65766b
-
SHA1
6e0a229b3df3ecee26d01cf0e0ad733869d68371
-
SHA256
a3730f0ded9ff00aa73a1cdd9d2493641882e4667046e1e60908e36b1470a95f
-
SHA512
2f1f14c085d06bfe8b7bf155fa81e65b5db8aae01b93479f6b8ade77d05277d41e46cb70e972457267cba6c5858c2698ea790d7e65119ac86e8d8df1494b304c
-
SSDEEP
3072:L57CAvfmNMmc7vEvPlz96or0AXbK13bmfzzcCOYUbsJHt+q0gYX:xXn0zc7ve9zYUK13bmbrV1JB0ga
Malware Config
Signatures
Files
-
a3730f0ded9ff00aa73a1cdd9d2493641882e4667046e1e60908e36b1470a95f.exe windows x86
3945adb5232a98d6cf27c6c8bad488cb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
wininet
InternetOpenA
InternetCloseHandle
HttpOpenRequestA
HttpSendRequestA
HttpQueryInfoA
InternetReadFile
InternetConnectA
kernel32
InterlockedIncrement
GetCPInfo
GetOEMCP
SetErrorMode
ExitProcess
HeapAlloc
HeapReAlloc
VirtualAlloc
HeapFree
GetCommandLineA
GetProcessHeap
GetStartupInfoA
RtlUnwind
RaiseException
HeapSize
TerminateProcess
TlsFree
SetUnhandledExceptionFilter
IsDebuggerPresent
Sleep
GetStdHandle
HeapDestroy
HeapCreate
VirtualFree
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetACP
IsValidCodePage
GetConsoleCP
GetConsoleMode
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
LocalAlloc
GlobalFlags
WritePrivateProfileStringA
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetCurrentProcess
GetThreadLocale
FlushFileBuffers
SetFilePointer
ReadFile
InterlockedDecrement
GetModuleFileNameW
FormatMessageA
LocalFree
MulDiv
GlobalGetAtomNameA
GlobalFindAtomA
lstrcmpW
GetVersionExA
GlobalUnlock
GlobalFree
FreeResource
GetCurrentProcessId
SetLastError
GetCurrentThread
GetCurrentThreadId
ConvertDefaultLocale
EnumResourceLanguagesA
GetLocaleInfoA
LoadLibraryA
GlobalLock
GlobalAlloc
FreeLibrary
GlobalDeleteAtom
GetProcAddress
GlobalAddAtomA
FindResourceA
LoadResource
LockResource
SizeofResource
GetVersion
WideCharToMultiByte
MultiByteToWideChar
InterlockedExchange
CompareStringA
lstrlenA
GetTickCount
CreateDirectoryA
CreateProcessA
CloseHandle
WriteFile
CreateFileA
lstrcmpA
GetModuleHandleA
GetModuleFileNameA
GetTempPathA
GetLastError
CreateMutexA
UnhandledExceptionFilter
user32
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
ClientToScreen
LoadCursorA
GetDC
ReleaseDC
GetSysColorBrush
ShowWindow
SetWindowTextA
IsDialogMessageA
RegisterWindowMessageA
LoadIconA
SendDlgItemMessageA
WinHelpA
GetCapture
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
SetFocus
GetWindowTextA
GetForegroundWindow
GetTopWindow
GetMessageTime
GetMessagePos
MapWindowPoints
SetForegroundWindow
UpdateWindow
GetClientRect
GetMenu
GetMenuItemID
GetMenuItemCount
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
GetSysColor
AdjustWindowRectEx
CopyRect
PtInRect
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
SetWindowLongA
SetWindowPos
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
GetWindow
SetWindowsHookExA
CallNextHookEx
GetMessageA
TranslateMessage
DispatchMessageA
IsWindowVisible
GetKeyState
PeekMessageA
GetCursorPos
ValidateRect
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapA
GetFocus
ModifyMenuA
GetMenuState
EnableMenuItem
CheckMenuItem
GetDesktopWindow
GetActiveWindow
SetActiveWindow
GetSystemMetrics
UnregisterClassA
DestroyMenu
EndPaint
BeginPaint
UnhookWindowsHookEx
CreateDialogIndirectParamA
DestroyWindow
IsWindow
GetDlgItem
GetNextDlgTabItem
EndDialog
GetWindowThreadProcessId
GetParent
GetWindowLongA
GetLastActivePopup
IsWindowEnabled
MessageBoxA
PostMessageA
PostQuitMessage
SetCursor
SendMessageA
EnableWindow
SetTimer
GetSubMenu
gdi32
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
DeleteDC
GetStockObject
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
GetDeviceCaps
GetObjectA
SetBkColor
SetTextColor
GetClipBox
CreateBitmap
SetMapMode
RestoreDC
SaveDC
DeleteObject
winspool.drv
ClosePrinter
DocumentPropertiesA
OpenPrinterA
advapi32
RegCreateKeyExA
RegSetValueExA
RegQueryValueA
RegEnumKeyA
RegDeleteKeyA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegOpenKeyA
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegEnumValueA
RegQueryInfoKeyA
shell32
SHGetSpecialFolderPathA
ShellExecuteA
shlwapi
SHSetValueA
PathFindFileNameA
PathFindExtensionA
SHGetValueA
PathFileExistsA
ole32
CoInitializeEx
oleaut32
VariantClear
VariantChangeType
VariantInit
Sections
.text Size: 140KB - Virtual size: 136KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ