Static task
static1
Behavioral task
behavioral1
Sample
c3637b3c5c3fa0b6d3e952dba707d69d554fefe495d2ed4b252088c6bd6d3db6.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c3637b3c5c3fa0b6d3e952dba707d69d554fefe495d2ed4b252088c6bd6d3db6.exe
Resource
win10v2004-20220901-en
General
-
Target
c3637b3c5c3fa0b6d3e952dba707d69d554fefe495d2ed4b252088c6bd6d3db6
-
Size
377KB
-
MD5
6ceac3cfa7e94acdcf4241409fd2370c
-
SHA1
e54e44c010b4e7731d98fd42d9f87c0aba139156
-
SHA256
c3637b3c5c3fa0b6d3e952dba707d69d554fefe495d2ed4b252088c6bd6d3db6
-
SHA512
922fc288451b1af91a1eaf4dbe0fbd2d624b12207667b57eb77a5bfbfc1176af51eb141fdc1900e2bd8f33388b3f3bbbe8dd4a1570cd7e6594510158985858ca
-
SSDEEP
6144:IMlFi5bFNsRZTdQ93gEjQV/e2dhw8aR91bw7ry+tRWfOanuYeAZc0/suyJ3Y6hJm:bk552feydwHR918ry8anuYeAZTs33Hzm
Malware Config
Signatures
Files
-
c3637b3c5c3fa0b6d3e952dba707d69d554fefe495d2ed4b252088c6bd6d3db6.exe windows x86
76bc1ea7cfd50fc122d5efa2891a7d3c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
SaveDC
SetBoundsRect
EnumMetaFile
comctl32
InitCommonControlsEx
advapi32
RegReplaceKeyW
kernel32
GetLocaleInfoW
GetTempPathW
UnhandledExceptionFilter
GetDiskFreeSpaceExW
HeapSize
GetLocaleInfoA
TlsFree
HeapAlloc
GetCommandLineW
GetOEMCP
GetTickCount
IsValidLocale
HeapDestroy
GetUserDefaultLCID
WriteConsoleW
EnumSystemLocalesA
TlsAlloc
GlobalFindAtomW
ReadFile
FreeLibrary
FlushFileBuffers
GetStringTypeA
CloseHandle
GetStringTypeW
GetCommandLineA
LCMapStringA
GetVersionExA
GetTimeFormatA
InterlockedIncrement
GetCurrentThread
TlsGetValue
GetStartupInfoA
VirtualFree
SetUnhandledExceptionFilter
CreateFileA
WritePrivateProfileStructW
GetDateFormatA
VirtualAlloc
GetModuleHandleA
HeapCreate
TlsSetValue
FreeEnvironmentStringsW
CreateSemaphoreW
GetSystemTimeAsFileTime
GetLastError
GetConsoleMode
MultiByteToWideChar
GetModuleFileNameW
GlobalGetAtomNameA
CreateMutexA
TerminateProcess
RtlZeroMemory
DeleteCriticalSection
GetLocalTime
SetConsoleCtrlHandler
WriteFile
IsDebuggerPresent
VirtualQuery
GetModuleFileNameA
GetCurrentThreadId
EnterCriticalSection
OpenMutexA
GetCurrentProcessId
CreateDirectoryExW
HeapFree
WideCharToMultiByte
GetTimeZoneInformation
GetCPInfo
WriteConsoleA
LoadLibraryA
SetEnvironmentVariableA
InterlockedExchange
GetExitCodeProcess
CompareStringW
InterlockedDecrement
GetCurrentProcess
CompareStringA
GetConsoleScreenBufferInfo
SetHandleCount
GetEnvironmentStringsW
GetPrivateProfileSectionA
GetConsoleOutputCP
SetFilePointer
InitializeCriticalSection
GetEnvironmentStrings
GetStartupInfoW
GetStdHandle
Sleep
FreeEnvironmentStringsA
FreeLibraryAndExitThread
QueryPerformanceCounter
LeaveCriticalSection
LCMapStringW
GetFileType
GetProcAddress
GetACP
HeapReAlloc
SetLastError
GetConsoleCP
SetStdHandle
RtlUnwind
GetProcessHeap
ExitProcess
EnumSystemCodePagesA
WaitForMultipleObjectsEx
IsValidCodePage
comdlg32
GetOpenFileNameW
ChooseColorA
LoadAlterBitmap
user32
SetCapture
AnimateWindow
GetTopWindow
RegisterClassA
RegisterClassExA
CreateDesktopA
ToAscii
BeginDeferWindowPos
GetMenuState
shell32
SHGetFileInfo
ShellExecuteEx
ShellExecuteExW
SHGetDataFromIDListA
Sections
.text Size: 151KB - Virtual size: 151KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 10KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 207KB - Virtual size: 207KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ