Static task
static1
Behavioral task
behavioral1
Sample
3abe3a38a2ea3136a0af7fc1c0d51ffc17247560a8378e8b8bf3ad09702f5e98.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
3abe3a38a2ea3136a0af7fc1c0d51ffc17247560a8378e8b8bf3ad09702f5e98.exe
Resource
win10v2004-20230220-en
General
-
Target
3abe3a38a2ea3136a0af7fc1c0d51ffc17247560a8378e8b8bf3ad09702f5e98
-
Size
64KB
-
MD5
c54387e758672d0c5007649be64df123
-
SHA1
5f61e828e6ff0f1303b488727d478a91551034b0
-
SHA256
3abe3a38a2ea3136a0af7fc1c0d51ffc17247560a8378e8b8bf3ad09702f5e98
-
SHA512
7b3a8f6752d295202c2e0f5dfb01fbe24b5eb1222be79d58cfd2346175b22475b9429c37fddc140852e3d2975005f36fdc3e26ea9673e24d93f1c98201c29418
-
SSDEEP
768:p33aOHfSJgUUb6VVvAJthv2ID0RyH9Ujn7gDMIxNhVoe3Mf:RaOHfkgSV4LUj7Qvnoe3
Malware Config
Signatures
Files
-
3abe3a38a2ea3136a0af7fc1c0d51ffc17247560a8378e8b8bf3ad09702f5e98.exe windows x86
18d9ccf1a0dd1e847cd41c26f2e2068b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateProcessA
GetFileAttributesA
GetDriveTypeA
GetShortPathNameA
FindFirstFileA
FindNextFileA
FindClose
_lopen
_llseek
GlobalAlloc
GlobalLock
_lread
GlobalUnlock
GetWindowsDirectoryA
GetLastError
DeleteFileA
FlushFileBuffers
LCMapStringW
CloseHandle
ReadFile
GetStringTypeW
LCMapStringA
SetStdHandle
LoadLibraryA
GetStringTypeA
HeapReAlloc
GetProcAddress
HeapAlloc
GetACP
VirtualAlloc
MultiByteToWideChar
SetFilePointer
GetCPInfo
GetOEMCP
CreateDirectoryA
RtlUnwind
HeapFree
WriteFile
GlobalFree
GetModuleHandleA
HeapCreate
HeapDestroy
VirtualFree
GetStdHandle
SetHandleCount
GetFileType
CopyFileA
GetCurrentDirectoryA
_lcreat
_lwrite
_lclose
GetVersion
lstrlenA
GetSystemDirectoryA
lstrcpyA
GetCurrentProcess
TerminateProcess
GetEnvironmentStringsW
GetEnvironmentStrings
GetStartupInfoA
GetCommandLineA
ExitProcess
FreeEnvironmentStringsW
WideCharToMultiByte
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
user32
TranslateMessage
DispatchMessageA
ShowWindow
SetWindowTextA
RegisterClassA
GetMessageA
LoadAcceleratorsA
UpdateWindow
LoadCursorA
LoadIconA
DialogBoxParamA
CreateWindowExA
GetSystemMetrics
wsprintfA
ReleaseDC
MessageBoxA
DefWindowProcA
GetWindowTextA
PostMessageA
EndDialog
CharUpperA
SetDlgItemTextA
GetDlgItemTextA
InvalidateRect
GetDC
SetFocus
PostQuitMessage
EndPaint
SetRect
BeginPaint
gdi32
GetTextMetricsA
Rectangle
LineTo
SetTextColor
TextOutA
SetBkMode
CreateSolidBrush
SelectObject
CreateFontA
GetTextExtentPoint32A
DeleteObject
CreatePalette
MoveToEx
CreatePen
StretchDIBits
RealizePalette
SelectPalette
GetStockObject
imm32
ImmInstallIMEA
advapi32
RegEnumKeyExA
RegOpenKeyExA
RegQueryInfoKeyA
RegSetValueExA
RegQueryValueExA
RegCloseKey
RegDeleteKeyA
RegCreateKeyExA
Sections
.text Size: 40KB - Virtual size: 38KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ