Static task
static1
Behavioral task
behavioral1
Sample
81801467705aa9efa09314d16d5fc6c2673706b43174aa617d5408b0c4a80694.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
81801467705aa9efa09314d16d5fc6c2673706b43174aa617d5408b0c4a80694.exe
Resource
win10v2004-20220812-en
General
-
Target
81801467705aa9efa09314d16d5fc6c2673706b43174aa617d5408b0c4a80694
-
Size
447KB
-
MD5
3b61be67b494afa177ac625cad742c13
-
SHA1
42097af9fac80605b1f6952b2bf9bbace5053248
-
SHA256
81801467705aa9efa09314d16d5fc6c2673706b43174aa617d5408b0c4a80694
-
SHA512
4b200102972ab0128cd176ffbadc9f1c04388030960cc189a0610bc537abf4ba8a7443c0d083b6e3e13f5c2a31b95692470fa77b9f2858553fbcddd50d2f0fae
-
SSDEEP
12288:h6k4e+pr0X8E7ROD16z6eD7SHvN6PZrHTW6eqTEWeCmSYoVL+CVs:Mk4eg0X8Ek16zs6hrHTWILGStxV
Malware Config
Signatures
Files
-
81801467705aa9efa09314d16d5fc6c2673706b43174aa617d5408b0c4a80694.exe windows x86
8c0195f4e68003916d651565dea2921f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
wininet
HttpEndRequestA
InternetOpenA
RetrieveUrlCacheEntryFileA
InternetAutodialHangup
InternetOpenUrlA
DeleteUrlCacheEntry
InternetSetDialStateA
InternetWriteFileExW
InternetCrackUrlW
InternetUnlockRequestFile
InternetQueryOptionW
HttpEndRequestW
IncrementUrlCacheHeaderData
InternetLockRequestFile
IsUrlCacheEntryExpiredW
FtpGetFileSize
CreateUrlCacheEntryW
SetUrlCacheEntryGroupA
InternetFortezzaCommand
InternetCheckConnectionW
advapi32
CryptSetProvParam
RegQueryMultipleValuesW
RegOpenKeyExA
RegEnumKeyW
user32
CreateWindowExW
SetWindowWord
GetUserObjectInformationW
DestroyMenu
ToUnicodeEx
DrawFocusRect
IsCharLowerA
EnumDisplaySettingsW
CreateDialogIndirectParamA
CallWindowProcW
VkKeyScanExW
GetWindow
CopyRect
TabbedTextOutW
ReleaseDC
gdi32
WidenPath
GetSystemPaletteEntries
ScaleViewportExtEx
OffsetViewportOrgEx
CreateDCW
GetGlyphOutlineA
SelectClipRgn
CreateRectRgn
CreateFontIndirectA
GetKerningPairs
ExtTextOutA
SetTextAlign
GetTextExtentPointA
PolyPolyline
CloseMetaFile
ExtTextOutW
GetROP2
GetEnhMetaFileHeader
TextOutW
kernel32
WideCharToMultiByte
IsBadReadPtr
SetFilePointer
FlushFileBuffers
EnterCriticalSection
SetConsoleCtrlHandler
TerminateProcess
FreeLibrary
GetLocaleInfoA
FreeEnvironmentStringsA
GetTimeZoneInformation
TlsSetValue
DebugBreak
CompareStringA
GetProcessHeap
LoadLibraryW
GetProcAddress
DeleteCriticalSection
GetUserDefaultLCID
GetEnvironmentStringsW
HeapDestroy
GetStartupInfoA
GetCommandLineW
GetTimeFormatA
WriteFile
SetLastError
SetEnvironmentVariableA
QueryPerformanceCounter
SetStdHandle
GetTickCount
ExitProcess
VirtualFree
GetLastError
GetModuleHandleA
InterlockedDecrement
CreateFileA
LCMapStringA
GetConsoleCP
HeapAlloc
CloseHandle
InitializeCriticalSection
TlsFree
GetConsoleOutputCP
HeapReAlloc
IsValidCodePage
LCMapStringW
GetCommandLineA
GetOEMCP
TlsAlloc
GetCurrentThread
HeapValidate
EnumSystemLocalesA
GetStdHandle
OutputDebugStringA
LoadLibraryA
GetEnvironmentStrings
GetCurrentProcessId
LeaveCriticalSection
GetDateFormatA
CompareStringW
GetModuleFileNameA
SetTimeZoneInformation
lstrcmp
GetCurrentThreadId
InterlockedExchange
RtlUnwind
GetStringTypeA
SetHandleCount
GetSystemTimeAsFileTime
GetConsoleMode
VirtualAlloc
IsDebuggerPresent
GetFileType
InterlockedIncrement
IsValidLocale
GetStringTypeW
GetModuleFileNameW
WriteConsoleA
OutputDebugStringW
GetStartupInfoW
WriteConsoleW
GetVersionExA
GetCPInfo
GetCurrentProcess
lstrlenA
RaiseException
FreeEnvironmentStringsW
TlsGetValue
SetUnhandledExceptionFilter
VirtualQuery
MultiByteToWideChar
UnhandledExceptionFilter
HeapCreate
HeapFree
GetACP
GetLocaleInfoW
Sections
.text Size: 260KB - Virtual size: 259KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 178KB - Virtual size: 194KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ