Static task
static1
Behavioral task
behavioral1
Sample
3cc9d9a12f3b884582e5c4daf7d83c4a510172a836de90b87439388e3cde3682.exe
Resource
win7-20220812-en
General
-
Target
3cc9d9a12f3b884582e5c4daf7d83c4a510172a836de90b87439388e3cde3682
-
Size
815KB
-
MD5
b5ab935d750be8b5b7c9cf3b87c772ca
-
SHA1
92f3b5633afb04617dec07746a5a14d004ad9afd
-
SHA256
3cc9d9a12f3b884582e5c4daf7d83c4a510172a836de90b87439388e3cde3682
-
SHA512
30dea29c2aefa71cadecff779186979347695ddaaa222431b113b90b20cd12f87b59d5efcfce677be96780be94712f0fcddba6b878890c7377b3901830018cbb
-
SSDEEP
12288:bzMqUwnlC8P9RgCLMypYbiDV6K5IHcMTOsvdqcX+MVpsyxre833poVwxVg:UwnQWLMy7DVz5IHcwvdqcJnD33pom
Malware Config
Signatures
Files
-
3cc9d9a12f3b884582e5c4daf7d83c4a510172a836de90b87439388e3cde3682.exe windows x86
02162740acfdc58d3735d152f6dc4561
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindFirstFileA
FindClose
FindNextFileA
GetVersionExA
GetTempPathA
DeleteFileA
lstrcpyA
GetDriveTypeA
GetVolumeInformationA
Sleep
GetComputerNameA
GetLocalTime
WaitForSingleObject
GetCurrentThread
GetEnvironmentVariableA
CreateDirectoryA
RemoveDirectoryA
SetFileAttributesA
FreeLibrary
GetCurrentProcess
GetStdHandle
GetFullPathNameW
GetFullPathNameA
HeapReAlloc
CreateFileA
GetFileSize
CreateMutexW
HeapCompact
SetFilePointer
TryEnterCriticalSection
MapViewOfFile
UnmapViewOfFile
SetEndOfFile
HeapAlloc
SystemTimeToFileTime
QueryPerformanceCounter
HeapFree
InterlockedCompareExchange
UnlockFile
FlushViewOfFile
LockFile
WaitForSingleObjectEx
LoadLibraryA
GetTickCount
UnlockFileEx
GetProcessHeap
GetSystemTimeAsFileTime
FormatMessageA
WriteFile
InitializeCriticalSection
WideCharToMultiByte
LoadLibraryW
FormatMessageW
GetVersionExW
HeapDestroy
LeaveCriticalSection
GetFileAttributesA
HeapCreate
HeapValidate
GetFileAttributesW
ReadFile
CreateFileW
MultiByteToWideChar
FlushFileBuffers
GetTempPathW
GetLastError
HeapSize
LockFileEx
EnterCriticalSection
GetDiskFreeSpaceW
CreateFileMappingA
CreateFileMappingW
GetDiskFreeSpaceA
GetSystemInfo
GetFileAttributesExW
DeleteCriticalSection
GetCurrentThreadId
OutputDebugStringA
CloseHandle
DeleteFileW
GetCurrentProcessId
LocalFree
GetSystemTime
AreFileApisANSI
FileTimeToSystemTime
GetFileInformationByHandle
SetEnvironmentVariableA
CompareStringW
CompareStringA
OutputDebugStringW
GetProcAddress
GetModuleHandleW
ExitProcess
ExitThread
CreateThread
GetCommandLineA
GetStartupInfoA
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlUnwind
SetHandleCount
GetFileType
VirtualFree
VirtualAlloc
GetModuleFileNameA
GetConsoleCP
GetConsoleMode
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
InitializeCriticalSectionAndSpinCount
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringA
LCMapStringW
SetStdHandle
GetTimeZoneInformation
RaiseException
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
GetModuleHandleA
iphlpapi
GetAdaptersInfo
Sections
.text Size: 651KB - Virtual size: 651KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 60KB - Virtual size: 79KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 48KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ