Static task
static1
Behavioral task
behavioral1
Sample
f022999b943eb11682b9838a1eeccee28aff3f95ebd05456343ee1284cac1720.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f022999b943eb11682b9838a1eeccee28aff3f95ebd05456343ee1284cac1720.exe
Resource
win10v2004-20220812-en
General
-
Target
f022999b943eb11682b9838a1eeccee28aff3f95ebd05456343ee1284cac1720
-
Size
577KB
-
MD5
0488430a3d97e12a51f5bc4bbe4220cb
-
SHA1
8dccf51c8bc43b80afa2ec1a513203948eede5b7
-
SHA256
f022999b943eb11682b9838a1eeccee28aff3f95ebd05456343ee1284cac1720
-
SHA512
757bfe21f75706b8997db1bd66c698ad686afa4a0a6748838360f7b22647ad4734ed624d8a4e13f3b1cc3edd13c0f2ef14e99afb41d3a5661e1b1437fd894964
-
SSDEEP
12288:Os+u7AqdEtiX3A0q9xn/mVanbwxZcJluT4H2Gfz3cB0Y2Xp9rvR:h+u7AqdE88n2eMEJlu8H203c0PR
Malware Config
Signatures
Files
-
f022999b943eb11682b9838a1eeccee28aff3f95ebd05456343ee1284cac1720.exe windows x86
690cec3020db2165126742efca70a6b5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
SHQueryRecycleBinW
SHGetFileInfo
gdi32
GetStretchBltMode
ChoosePixelFormat
GetWindowExtEx
GetPaletteEntries
ExtCreatePen
SelectPalette
SetDIBColorTable
ColorMatchToTarget
PlayEnhMetaFileRecord
GetMetaFileBitsEx
EnumFontFamiliesExA
CreateFontA
FrameRgn
EndDoc
GdiPlayDCScript
CreateCompatibleDC
FixBrushOrgEx
SetMiterLimit
kernel32
LoadLibraryW
InterlockedDecrement
InterlockedIncrement
HeapFree
Sleep
GetTickCount
IsDebuggerPresent
GetEnvironmentStringsW
OutputDebugStringW
EnumSystemLocalesA
GetModuleHandleW
WriteConsoleA
RaiseException
GetCurrentThread
WriteConsoleW
GetDateFormatA
ExitProcess
SetFilePointer
TlsFree
InterlockedExchange
SetUnhandledExceptionFilter
GetCurrentThreadId
OutputDebugStringA
GetModuleFileNameW
GetConsoleOutputCP
GetLocaleInfoA
ReadConsoleW
SetConsoleCtrlHandler
EnterCriticalSection
GetConsoleMode
IsBadReadPtr
LeaveCriticalSection
CreateMutexA
ResetEvent
GetStdHandle
VirtualFree
HeapValidate
GetTimeFormatA
OpenMutexA
CompareStringA
LoadLibraryA
GetLocaleInfoW
GetStartupInfoA
InitializeCriticalSectionAndSpinCount
WideCharToMultiByte
GetTimeZoneInformation
TerminateProcess
GetModuleHandleA
GetCurrentProcess
TlsGetValue
DeleteCriticalSection
CompareStringW
FreeEnvironmentStringsW
GetOEMCP
TlsAlloc
LCMapStringA
GetUserDefaultLCID
GetCPInfo
HeapAlloc
GetProcessHeap
GetProcAddress
GetFileType
MultiByteToWideChar
HeapSize
CloseHandle
VirtualAlloc
LCMapStringW
DebugBreak
GetACP
WriteFile
VirtualQuery
FlushFileBuffers
FreeEnvironmentStringsA
HeapDestroy
GetModuleFileNameA
UnhandledExceptionFilter
GetConsoleCP
SetEnvironmentVariableA
ReadFile
QueryPerformanceCounter
FreeLibrary
SetHandleCount
GetStringTypeA
WriteProfileStringA
SetLastError
IsValidLocale
HeapCreate
CreateFileA
GetCommandLineA
GetEnvironmentStrings
GetSystemTimeAsFileTime
IsValidCodePage
GetStringTypeW
GetCurrentProcessId
GetLastError
SetStdHandle
TlsSetValue
lstrlenA
HeapReAlloc
RtlUnwind
comdlg32
GetSaveFileNameA
GetFileTitleW
FindTextW
comctl32
InitCommonControlsEx
user32
RedrawWindow
SystemParametersInfoA
RegisterClassExA
RegisterClassA
LoadMenuIndirectA
MessageBoxW
IsZoomed
wininet
FtpGetFileW
InternetSetCookieA
UnlockUrlCacheEntryFile
SetUrlCacheEntryInfoW
InternetQueryOptionW
InternetTimeToSystemTime
InternetShowSecurityInfoByURL
DeleteUrlCacheEntryA
GetUrlCacheEntryInfoExA
Sections
.text Size: 337KB - Virtual size: 337KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 48KB - Virtual size: 62KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 179KB - Virtual size: 179KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ