Static task
static1
Behavioral task
behavioral1
Sample
c257b5f5a5108c36d7a425a30718347e58668ea7c02de2d8131b7f9b6f158c66.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
c257b5f5a5108c36d7a425a30718347e58668ea7c02de2d8131b7f9b6f158c66.exe
Resource
win10v2004-20220812-en
General
-
Target
c257b5f5a5108c36d7a425a30718347e58668ea7c02de2d8131b7f9b6f158c66
-
Size
332KB
-
MD5
cbaeb238d87f3c95238fae5475ea21e5
-
SHA1
924136f18190ed8957f0f36eed5c2821f0c009c9
-
SHA256
c257b5f5a5108c36d7a425a30718347e58668ea7c02de2d8131b7f9b6f158c66
-
SHA512
0d7d9b5aaf1e469a9aaa3e11c4a4f58b78843d68dafe645164823e257970be6c3a07ca6b300128a0e101d00fc4ffa1140ee0de3ee958e4562227da5a28e951ab
-
SSDEEP
6144:2PIRHUAmy8DggEcX0OmSR/KHhParDz9HGCBk/AH+guA/0:IEHUdRDggPX1xNIkDJmvAHaAM
Malware Config
Signatures
Files
-
c257b5f5a5108c36d7a425a30718347e58668ea7c02de2d8131b7f9b6f158c66.exe windows x86
7c74ab8abd631285ea442e90eb736291
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
wininet
InternetAutodialHangup
SetUrlCacheEntryInfoA
InternetAlgIdToStringW
GetUrlCacheEntryInfoExA
DeleteIE3Cache
InternetUnlockRequestFile
InternetFortezzaCommand
InternetConfirmZoneCrossingA
DeleteUrlCacheEntryA
InternetGetLastResponseInfoA
GetUrlCacheGroupAttributeA
InternetTimeToSystemTime
FindCloseUrlCache
shell32
DragAcceptFiles
SHFileOperation
SheGetDirA
RealShellExecuteExA
DragQueryFileAorW
SHGetFileInfoW
SHGetSpecialFolderLocation
DoEnvironmentSubstW
DragQueryPoint
DoEnvironmentSubstA
advapi32
LookupAccountNameA
CryptSetProviderExW
CryptSignHashA
CryptGenRandom
RevertToSelf
RegCreateKeyExW
CryptSetProvParam
RegRestoreKeyW
RegLoadKeyA
InitiateSystemShutdownA
InitiateSystemShutdownW
AbortSystemShutdownW
gdi32
EnumFontFamiliesA
LineDDA
GetTextExtentPoint32A
PolyTextOutA
SetPolyFillMode
StretchBlt
GetKerningPairsA
RestoreDC
ScaleViewportExtEx
FlattenPath
SetArcDirection
EndPage
GetMetaFileBitsEx
RemoveFontResourceA
GetICMProfileA
GetTextAlign
GetDeviceCaps
kernel32
GetACP
SetConsoleOutputCP
LCMapStringA
VirtualAlloc
GetLocaleInfoW
InterlockedExchange
LeaveCriticalSection
GetModuleFileNameA
GetCurrentThreadId
GlobalFree
DeleteFileA
GetLastError
GetProcAddress
IsValidLocale
SetHandleCount
LocalHandle
SetFilePointer
TlsSetValue
GetSystemInfo
SetConsoleCtrlHandler
GetFileType
VirtualProtect
HeapAlloc
GetCurrentDirectoryW
lstrcpynW
GetEnvironmentStringsW
GetVersionExA
SetEnvironmentVariableA
SetStdHandle
SetLastError
GetStringTypeA
GetConsoleMode
LoadModule
HeapDestroy
HeapReAlloc
GetEnvironmentStrings
TlsFree
GetStartupInfoA
CompareStringW
WideCharToMultiByte
UnhandledExceptionFilter
GetUserDefaultLCID
FreeEnvironmentStringsW
OutputDebugStringA
GetSystemTimeAsFileTime
FreeEnvironmentStringsA
GetStringTypeW
HeapFree
GetTickCount
FlushFileBuffers
DebugBreak
GetConsoleCursorInfo
GetCPInfo
GetNamedPipeHandleStateW
ExitProcess
CloseHandle
GetTimeFormatA
LCMapStringW
DeleteCriticalSection
IsBadWritePtr
QueryPerformanceCounter
IsBadReadPtr
HeapCreate
SetConsoleCP
EnumSystemLocalesA
InitializeCriticalSection
LoadLibraryA
MultiByteToWideChar
GetModuleHandleA
VirtualFree
RtlUnwind
TlsGetValue
GetLocaleInfoA
WriteFile
GetStdHandle
GetDateFormatA
GetCurrentProcess
TlsAlloc
IsValidCodePage
GetCommandLineA
GetTimeZoneInformation
InterlockedDecrement
CompareStringA
InterlockedIncrement
GetCurrentThread
TerminateProcess
EnterCriticalSection
HeapValidate
CreateMutexW
GetOEMCP
GetCurrentProcessId
VirtualQuery
comdlg32
LoadAlterBitmap
GetSaveFileNameW
ReplaceTextA
GetFileTitleA
Sections
.text Size: 173KB - Virtual size: 173KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 144KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ