Static task
static1
Behavioral task
behavioral1
Sample
e0fbfdd5bb5d283ddbb8693da51c7caf2edc24a7da80478b15489ceb36724739.exe
Resource
win7-20220414-en
General
-
Target
e0fbfdd5bb5d283ddbb8693da51c7caf2edc24a7da80478b15489ceb36724739
-
Size
1.3MB
-
MD5
e51d77c98e92a06556b09b1bebfbc34a
-
SHA1
80cb84605a3e861708ee955923f87f69b8d9aaaf
-
SHA256
e0fbfdd5bb5d283ddbb8693da51c7caf2edc24a7da80478b15489ceb36724739
-
SHA512
a03c67719fa39a2c06e9b33f8ba99461a02626ec436f2de541c2a5ea9d206cffb642de2d1409597d27d5f8975884f773c40e7137034f5ab2fc12eb9342fc62a2
-
SSDEEP
24576:NLz8dhwdpThXXqJP5JsO569Trwzy7rgUr+ZDgTkIWSk8s9ifWTbY0OXLtzkiphm:NLYQDUxJ/5iky7rg08DghFsfYJIm8A
Malware Config
Signatures
Files
-
e0fbfdd5bb5d283ddbb8693da51c7caf2edc24a7da80478b15489ceb36724739.exe windows x86
ded6c839e7f7258224ae021602258361
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
wininet
HttpSendRequestA
HttpOpenRequestA
InternetSetOptionA
InternetReadFile
InternetConnectA
InternetCloseHandle
InternetOpenA
InternetCrackUrlA
InternetQueryOptionA
kernel32
MultiByteToWideChar
WideCharToMultiByte
FreeLibrary
GetProcAddress
LoadLibraryA
VirtualAlloc
VirtualFree
TerminateThread
GetExitCodeThread
Sleep
LocalFree
GetCurrentProcess
ExitProcess
CreateThread
SetThreadExecutionState
GetLastError
SetErrorMode
GetFileSizeEx
GetSystemInfo
GetTickCount
CreateMutexA
GetModuleFileNameW
GetProcessHeap
GetWindowsDirectoryW
CreateDirectoryW
TerminateProcess
ExitThread
ReadProcessMemory
GetThreadContext
SetThreadContext
HeapFree
CreateProcessW
GetCurrentProcessId
DeleteFileW
MoveFileW
GetLongPathNameW
WaitForSingleObject
GetTempPathW
OpenProcess
GetExitCodeProcess
ReadFile
GetModuleHandleA
GetModuleHandleW
CreateFileW
GetFileAttributesW
CreateToolhelp32Snapshot
Process32First
Process32Next
HeapReAlloc
HeapAlloc
GetCommandLineW
CloseHandle
user32
GetLastInputInfo
advapi32
RegOpenKeyExW
ConvertSidToStringSidW
CryptDestroyHash
CryptHashData
CryptCreateHash
CryptGetHashParam
CryptReleaseContext
CryptAcquireContextW
IsValidSid
RegSetValueExW
OpenProcessToken
GetTokenInformation
RegCloseKey
shell32
CommandLineToArgvW
ole32
CoTaskMemFree
Sections
.text Size: 31KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ