Static task
static1
Behavioral task
behavioral1
Sample
3ffb130a720018628e8181c8c69657a60b3890d67ba4ba553fa1477f85c85a66.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
3ffb130a720018628e8181c8c69657a60b3890d67ba4ba553fa1477f85c85a66.exe
Resource
win10v2004-20220901-en
General
-
Target
3ffb130a720018628e8181c8c69657a60b3890d67ba4ba553fa1477f85c85a66
-
Size
1.9MB
-
MD5
f239fb56d4fba9edcab72b8741a41c6a
-
SHA1
a84e460bf43f477a09e19653c318189f5062e425
-
SHA256
3ffb130a720018628e8181c8c69657a60b3890d67ba4ba553fa1477f85c85a66
-
SHA512
f3f57c6694b24ae14a5f06d2bce0bcddcbc4f2e501779b7ef6afe794c42f9c57ae52d594b99d47173d5447a2810bd67f9143c7556f265dcbf6d6acf6eae0fb6c
-
SSDEEP
24576:VWvsXRcsr6mbNpbI2pPMHNNhNTgQH5vSiOOsFU+7b8kBZvLb8H1UlgJmz/3Xxj5F:kvsX5IAS55z8O6wkB3lg2/3hf
Malware Config
Signatures
Files
-
3ffb130a720018628e8181c8c69657a60b3890d67ba4ba553fa1477f85c85a66.exe windows x64
b99750ab2c66a6add5c5a55eb88b5810
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
GlobalFlags
user32
EnableWindow
gdi32
CreateFontIndirectW
advapi32
RegOpenKeyExW
shell32
DragFinish
ole32
CoTaskMemRealloc
oleaut32
VarUdateFromDate
comctl32
ImageList_AddMasked
libmysql
mysql_close
libcrypto-1_1-x64
CONF_modules_unload
libcurl
curl_slist_append
ws2_32
WSACleanup
gdiplus
GdipCloneImage
iphlpapi
GetInterfaceInfo
msvcrt
_wcsnicmp
psapi
GetMappedFileNameW
Sections
.text Size: 314KB - Virtual size: 820KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 79KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ