Static task
static1
Behavioral task
behavioral1
Sample
387f46cb5010c74e9acff9980dff91dd41d1cc1ac0bed5409a396e29bf26d430.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
387f46cb5010c74e9acff9980dff91dd41d1cc1ac0bed5409a396e29bf26d430.exe
Resource
win10v2004-20220812-en
General
-
Target
387f46cb5010c74e9acff9980dff91dd41d1cc1ac0bed5409a396e29bf26d430
-
Size
2.3MB
-
MD5
652ccbb89992185861d164df4f675341
-
SHA1
9125046df5d3c9ff997e6dd3eed27ed00a804126
-
SHA256
387f46cb5010c74e9acff9980dff91dd41d1cc1ac0bed5409a396e29bf26d430
-
SHA512
d13c1fe24e10899c1e76e3e1d74110669151b4fe55a1017f1cedb551ee8a5ff077bd064d70b5d569e32e33c6cb3710aa7281a89bdf52874efed053e1a5c6357d
-
SSDEEP
49152:Y3NKMXlpAb25GScHZYjRH81/aQFHFaQyK2jE+kjytOw5UJTvpnqfZ8BezMMo/:Y3N1Xla25GSGWjRO/a7QyKQE3yT5I/Be
Malware Config
Signatures
Files
-
387f46cb5010c74e9acff9980dff91dd41d1cc1ac0bed5409a396e29bf26d430.exe windows x86
f9bde9da4fb20749557130e1182b83cf
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
psapi
GetModuleBaseNameA
winhttp
WinHttpSendRequest
WinHttpConnect
WinHttpReceiveResponse
WinHttpCloseHandle
WinHttpQueryHeaders
WinHttpQueryDataAvailable
WinHttpOpen
WinHttpOpenRequest
WinHttpReadData
WinHttpSetOption
WinHttpAddRequestHeaders
WinHttpCrackUrl
kernel32
ExpandEnvironmentStringsA
SleepEx
FormatMessageA
SetEnvironmentVariableA
GetDriveTypeW
CompareStringW
WriteConsoleW
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetTimeZoneInformation
CreateFileA
GetFileInformationByHandle
GetFullPathNameA
SetFilePointer
GetLocaleInfoW
GetEnvironmentStringsW
FreeEnvironmentStringsW
HeapSize
HeapCreate
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
IsValidCodePage
GetOEMCP
GetACP
GetSystemTime
CreateProcessW
GetCurrentProcess
WaitForSingleObject
OutputDebugStringW
Sleep
GetExitCodeProcess
GetFileAttributesW
GetModuleFileNameW
GetTempPathW
GetLastError
SetConsoleCtrlHandler
CloseHandle
QueryPerformanceCounter
QueryPerformanceFrequency
FindFirstFileW
HeapAlloc
HeapFree
GetModuleHandleW
GetProcessHeap
GetProcAddress
FindClose
FindNextFileW
LocalFree
SetFileAttributesW
GetModuleHandleExW
lstrlenW
InterlockedDecrement
GetSystemTimeAsFileTime
GetProcessTimes
lstrcmpiW
ResumeThread
GetTickCount
GetVersionExW
GetFileAttributesExW
CreateFileW
GetCurrentThread
GetSystemDirectoryA
SetEndOfFile
SetFilePointerEx
SetFileTime
WriteFile
ReadFile
FlushFileBuffers
MoveFileW
DeleteFileW
WideCharToMultiByte
MultiByteToWideChar
SetEnvironmentVariableW
CreateDirectoryW
CopyFileW
GetStartupInfoW
GetStdHandle
SetLastError
LocalAlloc
RemoveDirectoryW
WaitForMultipleObjects
GetVolumeInformationW
CreateMutexW
PeekNamedPipe
UnmapViewOfFile
SystemTimeToFileTime
SetEvent
InitializeCriticalSection
FormatMessageW
LeaveCriticalSection
FileTimeToSystemTime
SetThreadPriority
ReleaseSemaphore
OpenMutexW
EnterCriticalSection
ResetEvent
CreateSemaphoreW
CreateEventW
OpenFileMappingW
DeleteCriticalSection
ReleaseMutex
FileTimeToLocalFileTime
CreateThread
lstrlenA
lstrcmpW
GetCurrentThreadId
GetModuleFileNameA
GetCurrentDirectoryW
GetModuleHandleA
GetVersion
GetFileType
GetCurrentProcessId
GlobalMemoryStatus
FreeLibrary
LoadLibraryA
GetVersionExA
FlushConsoleInputBuffer
GetConsoleCP
SetHandleCount
IsProcessorFeaturePresent
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
LCMapStringW
RtlUnwind
GetCPInfo
HeapReAlloc
ExitProcess
ExitThread
InitializeCriticalSectionAndSpinCount
SetStdHandle
InterlockedExchange
RaiseException
InterlockedIncrement
InterlockedCompareExchange
GetStringTypeW
EncodePointer
DecodePointer
ReadConsoleInputA
SetConsoleMode
GetConsoleMode
PeekConsoleInputA
GetNumberOfConsoleInputEvents
GetCommandLineA
HeapSetInformation
LoadLibraryW
GetDriveTypeA
FindFirstFileExA
user32
GetDesktopWindow
GetProcessWindowStation
GetUserObjectInformationW
MessageBoxA
ole32
CoCreateInstance
CoUninitialize
CoInitialize
StringFromGUID2
CoCreateGuid
Sections
.text Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 404KB - Virtual size: 403KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 52KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 140KB - Virtual size: 139KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 165KB - Virtual size: 168KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE