Static task
static1
Behavioral task
behavioral1
Sample
784ac776cd2e0b64b73540c3b9ae2f821b5dcc0ed410fae0b9007666f7092d57.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
784ac776cd2e0b64b73540c3b9ae2f821b5dcc0ed410fae0b9007666f7092d57.exe
Resource
win10v2004-20220812-en
General
-
Target
784ac776cd2e0b64b73540c3b9ae2f821b5dcc0ed410fae0b9007666f7092d57
-
Size
664KB
-
MD5
09726547aacb8ee5e1afd79b7e38c823
-
SHA1
4464be9ddaee85aeda8c2d8f4705de86ce598566
-
SHA256
784ac776cd2e0b64b73540c3b9ae2f821b5dcc0ed410fae0b9007666f7092d57
-
SHA512
3ceb028c147885b68bf49dabf45927e6a79cef9d5972be9db634ae320dfb46a777bc2ac90d07e54b03b83170015a761fb52055fbf85f5191274295418424f109
-
SSDEEP
6144:+Lkh61m4VFBNR85wFL0OSRLmHhtg/h0VicDEBJ9Iy0oS9wJvyQlTgALXqo1jmUZb:0HZH0hLWg/iscQJ9a9wBPZNLXqs76P
Malware Config
Signatures
Files
-
784ac776cd2e0b64b73540c3b9ae2f821b5dcc0ed410fae0b9007666f7092d57.exe windows x86
cd5ca318ed1a3dd5a7ddeee83fcd4ea7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
urlmon
URLDownloadToFileA
kernel32
GetLastError
InterlockedIncrement
lstrcmpiA
IsDBCSLeadByte
DebugBreak
OutputDebugStringA
SetLastError
FreeLibrary
SizeofResource
LoadResource
FindResourceA
LoadLibraryExA
GetModuleHandleA
GetModuleFileNameA
FindClose
FindNextFileA
DeleteFileA
SetFileAttributesA
FindFirstFileA
GetCurrentDirectoryA
CreateProcessA
CreateEventA
GetProcAddress
CloseHandle
ReadFile
CreateFileA
WriteFile
GetPrivateProfileStringA
GetPrivateProfileIntA
lstrcpyA
GetFileAttributesA
lstrlenW
OpenEventA
GetTimeFormatA
LCMapStringW
LCMapStringA
GetCurrentProcessId
GetCurrentThreadId
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
CreateFileW
SetHandleCount
GetFileType
SetStdHandle
GetTimeZoneInformation
Sleep
HeapSize
GetStdHandle
ExitProcess
FatalAppExitA
HeapCreate
HeapDestroy
GetStringTypeW
GetStringTypeA
GetCurrentThread
TlsFree
WideCharToMultiByte
CreateDirectoryA
MultiByteToWideChar
lstrlenA
InterlockedDecrement
GetCurrentProcess
FlushInstructionCache
GetDateFormatA
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
RaiseException
TlsSetValue
TlsAlloc
CompareStringW
CompareStringA
FlushFileBuffers
GetLocaleInfoW
SetEndOfFile
SetConsoleCtrlHandler
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
TlsGetValue
IsValidCodePage
GetOEMCP
SetEnvironmentVariableA
GetTickCount
GetVersionExA
InterlockedCompareExchange
HeapFree
GetProcessHeap
HeapAlloc
LoadLibraryA
IsProcessorFeaturePresent
VirtualFree
VirtualAlloc
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlUnwind
VirtualProtect
GetSystemInfo
VirtualQuery
HeapReAlloc
GetConsoleCP
GetConsoleMode
SetFilePointer
GetCommandLineA
GetStartupInfoA
GetCPInfo
user32
GetSystemMetrics
LoadImageA
PostMessageA
IsWindow
EndDialog
GetSysColorBrush
GetParent
GetWindow
GetWindowRect
SystemParametersInfoA
GetClientRect
UnregisterClassA
SetWindowPos
SendMessageA
GetDlgItem
KillTimer
SetTimer
SetWindowTextA
GetWindowLongA
DefWindowProcA
GetActiveWindow
MessageBoxA
DialogBoxParamA
CharLowerA
DestroyWindow
CharNextA
LoadStringA
SetWindowLongA
MapWindowPoints
gdi32
SetTextColor
SetBkMode
advapi32
RegOpenKeyExA
RegDeleteValueA
RegQueryValueExA
RegEnumKeyExA
RegQueryInfoKeyA
RegSetValueExA
RegCreateKeyExA
RegCloseKey
RegDeleteKeyA
shell32
ShellExecuteA
ole32
CoFreeLibrary
CoLoadLibrary
CoInitialize
CoUninitialize
CoTaskMemFree
CoCreateInstance
CoTaskMemRealloc
CoTaskMemAlloc
oleaut32
VarUI4FromStr
SysFreeString
comctl32
InitCommonControlsEx
Sections
.text Size: 224KB - Virtual size: 223KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 32KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 192KB - Virtual size: 188KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tc Size: 204KB - Virtual size: 204KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE