Static task
static1
Behavioral task
behavioral1
Sample
3fce9507dbdcf3cdcc397b8b8cc78388701f453e1126ba135a78fd4c1d42d994.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
3fce9507dbdcf3cdcc397b8b8cc78388701f453e1126ba135a78fd4c1d42d994.exe
Resource
win10v2004-20221111-en
General
-
Target
3fce9507dbdcf3cdcc397b8b8cc78388701f453e1126ba135a78fd4c1d42d994
-
Size
80KB
-
MD5
4aa2fd6e4ac16839e5a49d1c3e52d541
-
SHA1
267475b51297ed7a6213874cb3303e1893bd1b1e
-
SHA256
3fce9507dbdcf3cdcc397b8b8cc78388701f453e1126ba135a78fd4c1d42d994
-
SHA512
255f3c60816514d37d675df56b5646e5261eef86215823406b36f95be82fcf76639a4a19095cec71f90d8296056785f7bdabd8ec1a5694caff7537d9eba63592
-
SSDEEP
1536:GJFBBghSvpgNTH7IOlIOonToIfANbOXkC6123njHVUhrOK:GtucvuTHtvMTBfgbOXkX1Mj+b
Malware Config
Signatures
Files
-
3fce9507dbdcf3cdcc397b8b8cc78388701f453e1126ba135a78fd4c1d42d994.exe windows x86
86f7581c857c0ba1b7e6e1e648e43993
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
GetCurrentProcessId
GetCurrentProcess
TerminateProcess
GetStartupInfoW
InterlockedCompareExchange
Sleep
InterlockedExchange
GetSystemTimeAsFileTime
ReadFile
DeleteFileW
FreeLibrary
CloseHandle
CreateFileW
GetProcAddress
LoadLibraryW
GetTempPathW
WriteFile
UnhandledExceptionFilter
user32
EndDialog
MessageBoxW
PostQuitMessage
TrackPopupMenu
GetSubMenu
LoadMenuW
ClientToScreen
EndPaint
BeginPaint
DefWindowProcW
RedrawWindow
DestroyWindow
DialogBoxParamW
UpdateWindow
ShowWindow
CreateWindowExW
RegisterClassExW
LoadCursorW
LoadIconW
DispatchMessageW
TranslateMessage
TranslateAcceleratorW
GetMessageW
LoadAcceleratorsW
GetWindowLongW
SetWindowLongW
ReleaseDC
GetSystemMetrics
GetDC
FillRect
SetWindowPos
gdi32
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
CreateSolidBrush
PlayEnhMetaFile
BitBlt
DeleteDC
GetEnhMetaFileW
CopyEnhMetaFileW
GetDeviceCaps
DeleteEnhMetaFile
DeleteObject
GetEnhMetaFileHeader
msvcr80
__set_app_type
_encode_pointer
__p__fmode
__p__commode
_crt_debugger_hook
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_unlock
__dllonexit
_lock
_onexit
_decode_pointer
_invoke_watson
_controlfp_s
memcpy
memset
_except_handler4_common
_wfopen
fseek
fread
_wtempnam
fclose
free
fwrite
??3@YAXPAX@Z
??2@YAPAXI@Z
malloc
_amsg_exit
__wgetmainargs
_cexit
_exit
_XcptFilter
exit
_wcmdln
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
_adjust_fdiv
__CxxFrameHandler3
Sections
.text Size: 28KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 102KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ