Static task
static1
Behavioral task
behavioral1
Sample
97297754e0a16b4c3868f470d1097d294d035597b517f906cfc08d693ca6e4ad.exe
Resource
win7-20220812-en
General
-
Target
97297754e0a16b4c3868f470d1097d294d035597b517f906cfc08d693ca6e4ad
-
Size
309KB
-
MD5
70f0727566886ae440cd54093b330800
-
SHA1
a00ef565a5641c5a9e18a7a39ed7fd31a751e4f9
-
SHA256
97297754e0a16b4c3868f470d1097d294d035597b517f906cfc08d693ca6e4ad
-
SHA512
f0e283c7eb47a067fc6ddb8843071af382853de789dc3629369350b87712b66cccbfef113c7179d3f21424190a438b0db84ffad9d1089e53e592ac8d0a40eb63
-
SSDEEP
6144:kZ2C0gdirvASfaUHhvkcq6RyA5RvH9FrpCfAruIImG4:kEPrzhMcqgBFrpP/DG4
Malware Config
Signatures
Files
-
97297754e0a16b4c3868f470d1097d294d035597b517f906cfc08d693ca6e4ad.exe windows x86
9f18663a3622f29d03c5dc8696d5ac39
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
version
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA
shlwapi
PathFileExistsA
kernel32
SetLastError
LocalFree
GetCommandLineW
FreeLibrary
SizeofResource
LoadResource
FindResourceA
LoadLibraryExA
GetModuleHandleA
GetModuleFileNameA
WaitForSingleObject
CreateThread
GetEnvironmentVariableA
OutputDebugStringA
LoadLibraryA
CloseHandle
DeviceIoControl
CreateFileA
GetCurrentProcessId
GetLocalTime
GetProcAddress
DebugBreak
DeleteFileA
GetFileAttributesA
HeapFree
GetProcessHeap
IsDBCSLeadByte
ReadFile
WriteFile
HeapAlloc
lstrlenW
MultiByteToWideChar
InterlockedDecrement
GetCurrentThreadId
SystemTimeToFileTime
LocalFileTimeToFileTime
CreateMutexA
OpenThread
ReleaseMutex
GetFileSizeEx
SetFilePointerEx
LoadLibraryW
FormatMessageW
GetSystemTime
SetEnvironmentVariableA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
FlushFileBuffers
lstrcmpiA
lstrlenA
InterlockedIncrement
GetFileSize
GetLastError
WideCharToMultiByte
GetCurrentProcess
FlushInstructionCache
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
RaiseException
Sleep
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetLocaleInfoA
LCMapStringW
LCMapStringA
InitializeCriticalSectionAndSpinCount
TlsFree
TlsSetValue
TlsAlloc
GetSystemTimeAsFileTime
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
CreateFileW
SetStdHandle
SetFilePointer
GetFileType
SetHandleCount
GetStringTypeW
GetStringTypeA
GetConsoleMode
GetConsoleCP
HeapSize
GetStdHandle
InterlockedCompareExchange
IsProcessorFeaturePresent
VirtualFree
VirtualAlloc
RtlUnwind
VirtualProtect
GetModuleHandleW
GetSystemInfo
VirtualQuery
SetEndOfFile
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCommandLineA
GetStartupInfoA
HeapCreate
HeapReAlloc
TlsGetValue
ExitProcess
user32
SetWindowLongA
CharNextA
DestroyWindow
UnregisterClassA
DialogBoxParamA
GetActiveWindow
DefWindowProcA
EndDialog
SendMessageA
GetWindowLongA
SetWindowTextA
SetWindowPos
ShowWindow
SetTimer
KillTimer
EnableWindow
GetDlgItem
MessageBoxA
MapWindowPoints
GetClientRect
wvsprintfA
LoadIconA
GetParent
GetWindow
GetWindowRect
SystemParametersInfoA
gdi32
GetStockObject
DeleteObject
CreateFontA
SetBkMode
advapi32
RegSetValueExA
RegQueryValueExA
RegQueryValueExW
RegEnumKeyExW
RegOpenKeyExW
RegEnumKeyExA
RegQueryInfoKeyA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
RegDeleteValueA
RegDeleteKeyA
shell32
SHGetSpecialFolderPathA
ExtractIconA
CommandLineToArgvW
ole32
CoInitialize
CoUninitialize
CoTaskMemFree
CoCreateInstance
CoTaskMemRealloc
CoTaskMemAlloc
oleaut32
VarUI4FromStr
comctl32
InitCommonControlsEx
wininet
HttpSendRequestExA
InternetCloseHandle
InternetReadFile
InternetWriteFile
InternetAttemptConnect
InternetConnectA
InternetOpenA
HttpSendRequestA
InternetSetCookieA
HttpAddRequestHeadersA
HttpOpenRequestA
HttpEndRequestA
Sections
.text Size: 162KB - Virtual size: 161KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 30KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 97KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE