Static task
static1
Behavioral task
behavioral1
Sample
cff2e64030ad3444b08b0bd87e73df9a34ea285ec864799f295d3c493b86bd35.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
cff2e64030ad3444b08b0bd87e73df9a34ea285ec864799f295d3c493b86bd35.exe
Resource
win10v2004-20220901-en
General
-
Target
cff2e64030ad3444b08b0bd87e73df9a34ea285ec864799f295d3c493b86bd35
-
Size
835KB
-
MD5
5120ecde863e2e96b0c1caa708cbdf4c
-
SHA1
7193fd4b3ad07a841d49478074955eba35b4b519
-
SHA256
cff2e64030ad3444b08b0bd87e73df9a34ea285ec864799f295d3c493b86bd35
-
SHA512
8531757d9a8803e5d7029fc92c137627053bc27c177773a57b0e355930af06252a92d535a44746285114ed9b7b9d9b70391020dbe3343a1ea48f1adaddc625ca
-
SSDEEP
24576:JS0EjtdXknwpdYesDuw50YzOJhzC/xagO705T3WnpT:E0EjtdXknwpdYEI0YzIzCJaH05T+T
Malware Config
Signatures
Files
-
cff2e64030ad3444b08b0bd87e73df9a34ea285ec864799f295d3c493b86bd35.exe windows x86
e878cb4683ce438c7b64a6d0b68002c5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shfolder
SHGetFolderPathA
wsock32
gethostbyaddr
WSAStartup
WSACleanup
wininet
InternetGetCookieA
InternetReadFile
HttpAddRequestHeadersA
InternetCloseHandle
HttpQueryInfoA
HttpSendRequestA
HttpOpenRequestA
InternetConnectA
InternetCrackUrlA
InternetCanonicalizeUrlA
InternetOpenA
InternetOpenUrlA
InternetSetCookieA
iphlpapi
GetIpAddrTable
netapi32
Netbios
kernel32
SetEnvironmentVariableA
SetEndOfFile
GetLocaleInfoW
IsBadCodePtr
IsBadReadPtr
GetTickCount
QueryPerformanceCounter
IsValidCodePage
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
GetEnvironmentStringsW
HeapSize
GetProcessHeap
GetSystemTime
GetLastError
InterlockedExchange
GetVersionExA
GetACP
GetLocaleInfoA
GetThreadLocale
MultiByteToWideChar
lstrlenA
CloseHandle
GetFileSize
CreateFileA
lstrcatA
lstrcpynA
ReleaseMutex
WaitForSingleObject
SetFileAttributesA
MoveFileA
DeleteFileA
GetVolumeInformationA
CopyFileA
GetModuleFileNameA
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
CreateMutexA
Sleep
InterlockedIncrement
InterlockedDecrement
CreateEventA
GetCurrentThreadId
LocalFree
LocalAlloc
FormatMessageA
CreateThread
ExitProcess
ReadFile
GetModuleHandleA
SetEvent
SetWaitableTimer
CreateWaitableTimerA
GetTempPathA
SetUnhandledExceptionFilter
OpenMutexA
GetCurrentProcessId
FreeLibrary
GetProcAddress
LoadLibraryA
SetErrorMode
OutputDebugStringA
TerminateProcess
HeapReAlloc
FindClose
FindNextFileA
FindFirstFileA
WriteFile
SizeofResource
FreeResource
LockResource
LoadResource
FindResourceA
FindCloseChangeNotification
FindNextChangeNotification
WaitForMultipleObjects
FindFirstChangeNotificationA
ExpandEnvironmentStringsA
GlobalAlloc
WideCharToMultiByte
FindResourceExA
CreateDirectoryA
GetSystemDirectoryA
GetWindowsDirectoryA
CompareStringW
CompareStringA
InitializeCriticalSection
DeleteCriticalSection
RaiseException
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
SetStdHandle
GetOEMCP
GetStringTypeW
GetStringTypeA
FlushFileBuffers
GetFileType
GetStdHandle
SetHandleCount
SetFilePointer
RtlUnwind
IsBadWritePtr
VirtualFree
HeapCreate
TlsGetValue
TlsSetValue
TlsFree
SetLastError
TlsAlloc
LCMapStringW
LCMapStringA
GetCPInfo
GetCommandLineA
GetStartupInfoA
GetCurrentProcess
VirtualQuery
GetSystemInfo
VirtualAlloc
HeapFree
HeapAlloc
HeapDestroy
GetCurrentDirectoryA
SetCurrentDirectoryA
GetDriveTypeA
LeaveCriticalSection
GetFullPathNameA
GetSystemTimeAsFileTime
GetTimeZoneInformation
VirtualProtect
GetDateFormatA
GetTimeFormatA
EnterCriticalSection
user32
GetKeyboardLayoutNameA
ActivateKeyboardLayout
GetKeyboardLayout
GetKeyboardLayoutList
wsprintfA
GetForegroundWindow
SetActiveWindow
GetFocus
GetActiveWindow
AttachThreadInput
LoadStringA
SetPropA
SetWindowPos
FindWindowExA
GetDlgItem
GetPropA
RemovePropA
GetMessageA
CreateWindowExA
SetWindowLongA
MsgWaitForMultipleObjects
DefWindowProcA
PeekMessageA
DispatchMessageA
GetSystemMetrics
GetWindowThreadProcessId
TranslateMessage
advapi32
RegDeleteValueA
RegCreateKeyExA
RegSetValueExA
RegEnumKeyExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
RegDeleteKeyA
shell32
ShellExecuteA
ole32
CoUnmarshalInterface
CoGetInterfaceAndReleaseStream
CoInitializeEx
CoCreateInstance
CoMarshalInterface
CreateStreamOnHGlobal
CoMarshalInterThreadInterfaceInStream
OleRun
oleaut32
GetErrorInfo
SysFreeString
VariantClear
SysAllocString
SysAllocStringByteLen
SysStringByteLen
VariantCopy
VariantInit
SysStringLen
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayCreateVector
shlwapi
StrRChrA
StrChrA
Sections
.text Size: 643KB - Virtual size: 642KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 74KB - Virtual size: 74KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 111KB - Virtual size: 111KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ