Static task
static1
Behavioral task
behavioral1
Sample
8f70bd22a7f3d8595f5ce2aefeb3d1e4a9ca57bebe88faf7dcd0f57c36c2d3e5.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
8f70bd22a7f3d8595f5ce2aefeb3d1e4a9ca57bebe88faf7dcd0f57c36c2d3e5.exe
Resource
win10v2004-20220812-en
General
-
Target
8f70bd22a7f3d8595f5ce2aefeb3d1e4a9ca57bebe88faf7dcd0f57c36c2d3e5
-
Size
447KB
-
MD5
9aa616f80c79730d2eaaffc7b2993c93
-
SHA1
0886a7a9a61c374dbd811859e574fd273beb0ccc
-
SHA256
8f70bd22a7f3d8595f5ce2aefeb3d1e4a9ca57bebe88faf7dcd0f57c36c2d3e5
-
SHA512
ec9237443b3040415b2783d1d81de9c366cd5fd96996445063d1d8ccd3e1a9690c03d69d640ebdca778b7e430e7312d5e7d6c9ddfde4bf4942d6a0fff368a984
-
SSDEEP
12288:P/U2iFoRgoy7rwlyJf3HlKK5cTrQAtHF4KC00k/7BiLZeDrjKLtKe:Ryyy5VKygrdtHS00kTALZwnKLtb
Malware Config
Signatures
Files
-
8f70bd22a7f3d8595f5ce2aefeb3d1e4a9ca57bebe88faf7dcd0f57c36c2d3e5.exe windows x86
15ea8d0a950fd1996b56d7af5683d3a9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegSaveKeyW
LookupAccountNameW
RegConnectRegistryA
CryptSetProviderW
CryptDuplicateHash
LookupAccountSidA
CryptDestroyHash
RegCreateKeyExW
CryptDestroyKey
LookupSecurityDescriptorPartsA
ReportEventW
LookupPrivilegeDisplayNameW
RegEnumValueW
CryptAcquireContextW
CryptSetProviderExA
wininet
FindCloseUrlCache
FtpGetCurrentDirectoryA
GetUrlCacheEntryInfoW
FtpPutFileA
InternetQueryFortezzaStatus
InternetSetCookieA
InternetQueryOptionW
GopherOpenFileW
InternetSetOptionExW
InternetTimeToSystemTimeA
ShowClientAuthCerts
InternetGetConnectedStateExA
FtpGetFileW
HttpOpenRequestA
HttpCheckDavCompliance
DeleteUrlCacheEntry
FtpCommandW
InternetAttemptConnect
InternetErrorDlg
InternetCreateUrlW
GetUrlCacheConfigInfoW
InternetSetOptionExA
FtpGetFileSize
GetUrlCacheEntryInfoExW
InternetFindNextFileA
user32
GetDialogBaseUnits
CheckMenuRadioItem
CopyImage
CharToOemBuffW
gdi32
SetDIBColorTable
SetFontEnumeration
GetTextExtentPointA
CreateDIBSection
ResizePalette
CombineRgn
EndPage
CopyMetaFileW
PolyBezierTo
kernel32
HeapCreate
GetUserDefaultLCID
ResetEvent
OpenFileMappingA
RtlUnwind
SuspendThread
FreeLibrary
GetStdHandle
LoadLibraryA
MultiByteToWideChar
GetModuleFileNameA
GetProcessHeap
DeleteCriticalSection
VirtualAlloc
TransmitCommChar
GetProcAddress
GetTimeZoneInformation
lstrcpynA
TerminateProcess
SetHandleCount
GetCurrentProcess
EnumSystemLocalesA
TlsSetValue
GetStartupInfoW
IsDebuggerPresent
ExitProcess
FreeEnvironmentStringsW
GetLocaleInfoA
UnhandledExceptionFilter
QueryPerformanceCounter
GetACP
IsValidLocale
WriteFile
LCMapStringW
GetModuleFileNameW
EnumDateFormatsExA
GetVersionExA
LeaveCriticalSection
GetTimeFormatA
SetLastError
GetFileType
RemoveDirectoryW
GetLastError
GetDateFormatA
GetStartupInfoA
IsValidCodePage
HeapFree
FoldStringW
TlsFree
InitializeCriticalSection
SetConsoleCtrlHandler
GetCurrentProcessId
InterlockedDecrement
WideCharToMultiByte
GetOEMCP
LCMapStringA
GetCommandLineW
Sleep
FreeEnvironmentStringsA
SetUnhandledExceptionFilter
GetEnvironmentStringsW
SetEnvironmentVariableA
CompareStringW
VirtualFree
GetSystemTimeAsFileTime
GetCommandLineA
GetStringTypeW
HeapAlloc
GetStringTypeA
InterlockedExchange
HeapDestroy
GetCPInfo
GlobalReAlloc
HeapSize
GetLocaleInfoW
InterlockedIncrement
GetCurrentThreadId
CompareStringA
HeapReAlloc
GetEnvironmentStrings
TlsGetValue
TlsAlloc
GetCurrentThread
GetTickCount
GetModuleHandleA
EnterCriticalSection
GetProfileIntW
VirtualQuery
comdlg32
PrintDlgW
ChooseColorW
PageSetupDlgA
PageSetupDlgW
ChooseColorA
ReplaceTextA
Sections
.text Size: 128KB - Virtual size: 127KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 312KB - Virtual size: 331KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ