Static task
static1
Behavioral task
behavioral1
Sample
3e7213c9a945c8c6c30dfe68941b16554de2bba7300385df8412c69c6b58c0df.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
3e7213c9a945c8c6c30dfe68941b16554de2bba7300385df8412c69c6b58c0df.exe
Resource
win10v2004-20230220-en
General
-
Target
3e7213c9a945c8c6c30dfe68941b16554de2bba7300385df8412c69c6b58c0df
-
Size
492KB
-
MD5
4a5fe47fdac454b340fea23d05b4154f
-
SHA1
dd53c5d7ac89c44742878ff4600e565f012aa69e
-
SHA256
3e7213c9a945c8c6c30dfe68941b16554de2bba7300385df8412c69c6b58c0df
-
SHA512
13f0e119449bc25cd3c032aff3a5369a837b1f3be9b674a9e7fed3758d787e0544da8fb85a3f67696c07388025fcf56ef7cad7732cc2b15d6e4616f81d4f88e5
-
SSDEEP
12288:jHy2es88hmcXee845KF+nnFziV8xop2PXU7YO6Cd:jHy3B4pBA8xopj7YjCd
Malware Config
Signatures
Files
-
3e7213c9a945c8c6c30dfe68941b16554de2bba7300385df8412c69c6b58c0df.exe windows x86
2f8f4f9322a380fb23037e69c884d6f5
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetFullPathNameW
RemoveDirectoryW
GetModuleFileNameW
GetFileAttributesW
DeleteFileW
GetCurrentDirectoryW
SetCurrentDirectoryW
GetProcAddress
CreateProcessW
FreeLibrary
CopyFileW
SetDllDirectoryW
MoveFileW
GetCommandLineW
VirtualProtect
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
GetTempPathW
Sleep
GetLastError
SetEvent
GetVersionExA
DeleteCriticalSection
GetModuleHandleW
GetEnvironmentStringsW
GetStdHandle
WriteConsoleA
OutputDebugStringA
GetCurrentThreadId
AttachConsole
OutputDebugStringW
WriteConsoleW
GetFileType
GetTickCount
MultiByteToWideChar
MoveFileExW
WideCharToMultiByte
SetThreadLocale
SetLastError
GetCurrentProcess
GetSystemDirectoryW
GetUserDefaultLCID
LoadLibraryW
GetCurrentProcessId
ExitProcess
CreateDirectoryW
SetFileTime
UnmapViewOfFile
GetFileAttributesExW
CreateFileMappingA
MapViewOfFile
GetFileTime
RaiseException
GetSystemInfo
VirtualQuery
LoadLibraryExA
GetStringTypeW
EncodePointer
DecodePointer
GetCPInfo
CompareStringW
LCMapStringW
GetLocaleInfoW
InitializeCriticalSectionAndSpinCount
CreateEventW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
ResetEvent
WaitForSingleObjectEx
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
InitializeSListHead
RtlUnwind
LoadLibraryExW
GetModuleHandleExW
GetModuleFileNameA
GetACP
HeapFree
HeapAlloc
HeapReAlloc
IsValidLocale
EnumSystemLocalesW
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCommandLineA
FreeEnvironmentStringsW
SetStdHandle
GetProcessHeap
FlushFileBuffers
GetConsoleCP
GetConsoleMode
HeapSize
SetFilePointerEx
SetEndOfFile
ReadConsoleW
GetEnvironmentVariableW
GetSystemTimeAsFileTime
GetFileSize
GetLocalTime
CloseHandle
CreateFileW
WaitForSingleObject
FindClose
WriteFile
FindNextFileW
FindFirstFileW
ReadFile
Sections
.text Size: 343KB - Virtual size: 343KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 110KB - Virtual size: 110KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ