Static task
static1
Behavioral task
behavioral1
Sample
c8cfcc6a4e99dcf9803ada1d45a11ffeb6e465d473153e31d7b6492178eb8239.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c8cfcc6a4e99dcf9803ada1d45a11ffeb6e465d473153e31d7b6492178eb8239.exe
Resource
win10v2004-20220812-en
General
-
Target
c8cfcc6a4e99dcf9803ada1d45a11ffeb6e465d473153e31d7b6492178eb8239
-
Size
988KB
-
MD5
f55c2af993660e27a7522d70736c2bd6
-
SHA1
a443682069440142af464d0aa3aebf79307faf7c
-
SHA256
c8cfcc6a4e99dcf9803ada1d45a11ffeb6e465d473153e31d7b6492178eb8239
-
SHA512
22674f8e2a921bb916b3c5d8e04c1b92de2f74f5649f502251c9f5b6674a3293353a5592e2b8a0d342042f8f514acd89fff8725c22725cc50122f57673eccbc8
-
SSDEEP
24576:l8/Ea9vdnX8K0s3S3cdQ0KIU16gZSjURZgZ0Z2Z9Z1ZDZBZ+EpNthggDgZGFaGNQ:Y/xQcwygZSnpNthggDgZGFaeU03gDkGa
Malware Config
Signatures
Files
-
c8cfcc6a4e99dcf9803ada1d45a11ffeb6e465d473153e31d7b6492178eb8239.exe windows x86
4b95b084b43043c37cc1d30354eaf152
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileA
GetWindowsDirectoryA
GetModuleHandleA
GetVersion
CopyFileA
GetShortPathNameA
WinExec
GetPrivateProfileStringA
LocalFree
WaitForSingleObjectEx
GetUserDefaultLangID
GetCurrentThread
FormatMessageA
GetSystemTime
DeleteFileA
CreateDirectoryA
GetFileAttributesA
GetModuleFileNameA
DeleteAtom
GetTempPathA
SetThreadPriority
ResumeThread
SuspendThread
CompareStringA
GetSystemDirectoryA
LoadLibraryA
GetLocaleInfoA
GetThreadLocale
GetVersionExA
InterlockedCompareExchange
HeapFree
WriteFile
ReadFile
ResetEvent
OpenProcess
TerminateProcess
GetTickCount
SetEndOfFile
GetConsoleOutputCP
WriteConsoleA
FlushFileBuffers
IsValidLocale
EnumSystemLocalesA
SetPriorityClass
QueryPerformanceCounter
GetCommandLineW
GetCommandLineA
GetEnvironmentStrings
FreeEnvironmentStringsA
SetStdHandle
GetConsoleMode
GetConsoleCP
GetStartupInfoA
GetFileType
SetHandleCount
GetOEMCP
GetTimeZoneInformation
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetStdHandle
HeapCreate
SetCurrentDirectoryA
GetCurrentDirectoryA
SetEnvironmentVariableA
WaitForSingleObject
GetLocalTime
TerminateThread
SetFilePointer
FindClose
Sleep
GetFileSize
SetLastError
GetCurrentProcessId
FreeLibrary
InterlockedDecrement
InterlockedIncrement
GetLastError
GetCurrentThreadId
GetCurrentProcess
FlushInstructionCache
GlobalDeleteAtom
LoadResource
LockResource
SizeofResource
DeleteCriticalSection
GetStringTypeA
LCMapStringA
LocalFileTimeToFileTime
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
CreateThread
ExitThread
GetProcessHeap
HeapAlloc
IsProcessorFeaturePresent
VirtualFree
VirtualAlloc
HeapDestroy
HeapReAlloc
HeapSize
FindResourceA
FindResourceExA
ExitProcess
GetSystemTimeAsFileTime
RtlUnwind
SetFileTime
SystemTimeToFileTime
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
SetEvent
CloseHandle
RaiseException
GetUserDefaultLCID
InterlockedExchange
FileTimeToSystemTime
GetFileTime
GetFileInformationByHandle
SetFileAttributesA
GetACP
user32
GetDlgCtrlID
SetRect
SetCursor
PtInRect
GetCursorPos
DestroyWindow
GetActiveWindow
SetActiveWindow
SetForegroundWindow
ExitWindowsEx
IsWindow
DestroyIcon
SetTimer
KillTimer
SetCapture
UnregisterClassA
IsWindowEnabled
GetDlgItem
SetWindowPos
MapWindowPoints
GetClientRect
InvalidateRect
TranslateMessage
ShowWindow
OffsetRect
UpdateWindow
GetWindowRect
GetWindow
GetParent
GetSystemMetrics
EndDialog
SetRectEmpty
SetFocus
FillRect
ScreenToClient
PostQuitMessage
ReleaseCapture
ReleaseDC
GetDC
EndPaint
BeginPaint
GetSysColor
GetFocus
GetCapture
DrawFocusRect
gdi32
SetTextColor
SetBkMode
SelectObject
DeleteObject
GetStockObject
advapi32
InitializeSecurityDescriptor
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
OpenThreadToken
GetTokenInformation
EqualSid
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges
SetSecurityDescriptorDacl
AllocateAndInitializeSid
SetEntriesInAclW
FreeSid
shell32
SHGetSpecialFolderLocation
ole32
CLSIDFromString
CoInitialize
CoUninitialize
OleRun
CoTaskMemFree
CoCreateInstance
CoTaskMemRealloc
CoTaskMemAlloc
oleaut32
SysStringByteLen
SysAllocStringByteLen
VarBstrFromDate
VarUI4FromStr
VarDateFromStr
SysAllocString
SysFreeString
SystemTimeToVariantTime
VariantTimeToSystemTime
GetErrorInfo
VariantClear
shlwapi
PathFileExistsW
PathFindExtensionW
PathFileExistsA
PathFindFileNameW
comctl32
ImageList_Remove
_TrackMouseEvent
ImageList_GetImageCount
ImageList_Create
ImageList_Destroy
ImageList_AddMasked
InitCommonControlsEx
urlmon
URLDownloadToFileA
ws2_32
WSAStartup
inet_addr
gethostbyname
htons
socket
ntohl
WSACleanup
connect
send
recv
closesocket
shutdown
WSAGetLastError
setsockopt
wininet
InternetOpenA
InternetCloseHandle
InternetOpenUrlA
InternetReadFile
HttpQueryInfoA
winmm
timeGetTime
Sections
.text Size: 492KB - Virtual size: 490KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 100KB - Virtual size: 97KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 376KB - Virtual size: 372KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ