Static task
static1
Behavioral task
behavioral1
Sample
b3ef83a8b2a244650cdc7a20a390683d2c856b07b3e447f972c6944122ed69af.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b3ef83a8b2a244650cdc7a20a390683d2c856b07b3e447f972c6944122ed69af.exe
Resource
win10v2004-20220901-en
General
-
Target
b3ef83a8b2a244650cdc7a20a390683d2c856b07b3e447f972c6944122ed69af
-
Size
476KB
-
MD5
f962cf7e7dd60b9145043cd22edd71e1
-
SHA1
f4625e465003def057d6ad9313a397aef7e78bf7
-
SHA256
b3ef83a8b2a244650cdc7a20a390683d2c856b07b3e447f972c6944122ed69af
-
SHA512
9df250eea8e195be8ae22e56a9fd857bc7f6d3ddd67361763ac61774a14c2b26ea5456012ababf4124574bfdba930017af74f63cfad2e5bf23baf6a00c984874
-
SSDEEP
6144:svKHmvfk3dhe2bJsVNocLhbChE+DuZGkNVTTjkLOLA69SNMIZ9:sxIPd2VNoWbCObZ3NVPjDENM
Malware Config
Signatures
Files
-
b3ef83a8b2a244650cdc7a20a390683d2c856b07b3e447f972c6944122ed69af.exe windows x86
c21dada7b3bc330252086ee8a1a3a1ac
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
wininet
InternetOpenUrlA
InternetOpenA
InternetReadFile
wsock32
WSAStartup
gethostbyname
inet_addr
socket
connect
send
recv
closesocket
WSACleanup
ioctlsocket
htons
kernel32
EnumSystemLocalesA
IsValidLocale
GetDateFormatA
GetTimeFormatA
GetLocaleInfoW
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
Sleep
CreateProcessA
GetTickCount
GetVersionExA
GetSystemInfo
GlobalMemoryStatus
GetUserDefaultLCID
GetLastError
CreateMutexA
Process32Next
Process32First
CreateToolhelp32Snapshot
GetModuleHandleA
FreeLibrary
GetProcAddress
LoadLibraryA
ReleaseMutex
CreateThread
ExitProcess
CreateFileA
GetConsoleOutputCP
SetEndOfFile
ReadFile
GetTimeZoneInformation
CompareStringA
CompareStringW
GetLocaleInfoA
TerminateProcess
WriteConsoleA
FlushFileBuffers
GetSystemTimeAsFileTime
GetModuleHandleW
InterlockedIncrement
InterlockedDecrement
RaiseException
GetCommandLineA
HeapValidate
IsBadReadPtr
IsDebuggerPresent
DebugBreak
WideCharToMultiByte
MultiByteToWideChar
lstrlenA
TlsGetValue
TlsAlloc
TlsSetValue
GetCurrentThreadId
TlsFree
SetLastError
GetCurrentThread
SetEnvironmentVariableA
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetModuleFileNameW
EnterCriticalSection
LeaveCriticalSection
CloseHandle
WriteFile
GetConsoleCP
GetConsoleMode
RtlUnwind
GetModuleFileNameA
GetStdHandle
GetACP
GetOEMCP
GetCPInfo
IsValidCodePage
DeleteCriticalSection
FatalAppExitA
SetConsoleCtrlHandler
InterlockedExchange
InitializeCriticalSectionAndSpinCount
QueryPerformanceCounter
GetCurrentProcessId
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
HeapFree
VirtualFree
HeapAlloc
HeapSize
HeapReAlloc
VirtualAlloc
GetProcessHeap
VirtualQuery
SetFilePointer
OutputDebugStringA
WriteConsoleW
OutputDebugStringW
LoadLibraryW
SetStdHandle
user32
GetDesktopWindow
advapi32
OpenServiceA
StartServiceA
ControlService
CloseServiceHandle
GetUserNameA
OpenSCManagerA
shell32
ShellExecuteA
Sections
.textbss Size: - Virtual size: 183KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 388KB - Virtual size: 387KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 73KB - Virtual size: 73KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ