Static task
static1
Behavioral task
behavioral1
Sample
8f76b01a1b65e968146e413118771f39cbd18e0301ad9b24256386ae3638d481.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8f76b01a1b65e968146e413118771f39cbd18e0301ad9b24256386ae3638d481.exe
Resource
win10v2004-20220812-en
General
-
Target
8f76b01a1b65e968146e413118771f39cbd18e0301ad9b24256386ae3638d481
-
Size
430KB
-
MD5
69fb47da017f0f2ffe821eaecfc3e645
-
SHA1
504fd151404b2a9bd9a1bb7c6848239a32184904
-
SHA256
8f76b01a1b65e968146e413118771f39cbd18e0301ad9b24256386ae3638d481
-
SHA512
8e58b7967fc5a4634500bc632976f1b1ad932f75c13d4a920121b7a4611995d9f24649835742f48a0dde9d68ad01c8cf82091177254b8db46aedcca4e6d9d6e2
-
SSDEEP
12288:HDhmxe2Z6p7Cl7AMYfgFhu3Uu+OaDliK3EsBCdF1Eomb+aFm:jgxhE3Uu+XliK3DkdF1aF
Malware Config
Signatures
Files
-
8f76b01a1b65e968146e413118771f39cbd18e0301ad9b24256386ae3638d481.exe windows x86
015aff492f6905284a0120ee3ce32b8f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
wininet
InternetReadFileExW
RegisterUrlCacheNotification
InternetDialA
RunOnceUrlCache
InternetTimeToSystemTimeW
DeleteUrlCacheContainerA
InternetAttemptConnect
shell32
SHGetFileInfoA
SHInvokePrinterCommandW
CheckEscapesW
SHGetInstanceExplorer
DragFinish
SHGetDiskFreeSpaceA
SHFormatDrive
ShellExecuteA
ShellExecuteW
FindExecutableW
SHGetDataFromIDListW
ShellAboutW
DragAcceptFiles
SHInvokePrinterCommandA
ShellExecuteExA
SheChangeDirExW
SHGetSpecialFolderLocation
SHGetSettings
SHFileOperationW
ExtractAssociatedIconW
ShellExecuteExW
RealShellExecuteExA
RealShellExecuteW
SheGetDirA
ExtractIconEx
gdi32
PlayEnhMetaFileRecord
PolyBezierTo
user32
SetWindowPlacement
GetWindowTextW
MessageBoxA
ToUnicode
PackDDElParam
SetWindowWord
CloseWindow
RegisterHotKey
ReplyMessage
GetClassNameA
LoadMenuW
PaintDesktop
kernel32
VirtualQuery
ExitProcess
FreeEnvironmentStringsW
InterlockedExchange
DeleteCriticalSection
SetConsoleOutputCP
FreeEnvironmentStringsA
GetCurrentThread
CompareStringW
IsValidLocale
QueryPerformanceCounter
TlsAlloc
GetLocaleInfoA
WaitNamedPipeW
FreeLibrary
GetDriveTypeW
GetStringTypeW
EnumCalendarInfoExA
GetEnvironmentStrings
TlsGetValue
GetTimeFormatA
GetTimeZoneInformation
HeapSize
GetCommandLineA
InterlockedIncrement
HeapFree
GetVersionExA
GetFullPathNameW
GetLastError
GetCPInfo
GetStartupInfoA
GetCurrentProcessId
RtlUnwind
HeapAlloc
GetSystemTimeAsFileTime
GlobalAddAtomW
CompareStringA
TlsSetValue
GetModuleFileNameW
GetEnvironmentStringsW
MultiByteToWideChar
LCMapStringA
GetStartupInfoW
SetHandleCount
UnhandledExceptionFilter
GetProcessShutdownParameters
GetLocaleInfoW
VirtualFree
DeleteFileA
WideCharToMultiByte
GetOEMCP
GetModuleFileNameA
GetCommandLineW
SetLastError
LCMapStringW
GetDateFormatA
InitializeCriticalSection
TlsFree
GetStdHandle
SetEnvironmentVariableA
HeapDestroy
HeapReAlloc
InterlockedDecrement
LeaveCriticalSection
GetStringTypeA
GetTickCount
GetFileType
HeapCreate
VirtualAlloc
TerminateProcess
GetTimeFormatW
IsValidCodePage
GetModuleHandleA
WriteFile
LocalHandle
GetCurrentProcess
IsDebuggerPresent
EnterCriticalSection
GetCurrentThreadId
GetProcessHeap
GetProcAddress
SetUnhandledExceptionFilter
Sleep
WaitForMultipleObjectsEx
LoadLibraryA
EnumSystemLocalesA
GetACP
SetConsoleCtrlHandler
GetUserDefaultLCID
advapi32
CryptGetDefaultProviderA
StartServiceW
RegReplaceKeyA
RegEnumValueW
CreateServiceW
CryptSetProviderA
CryptCreateHash
RegEnumValueA
RegDeleteValueW
CryptSetProviderExA
RegConnectRegistryW
CryptContextAddRef
RegRestoreKeyA
CryptGetDefaultProviderW
CryptSignHashW
CryptEnumProviderTypesW
LookupPrivilegeValueW
Sections
.text Size: 141KB - Virtual size: 140KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 275KB - Virtual size: 274KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ