Static task
static1
Behavioral task
behavioral1
Sample
892bceb7a942609b678a4b8f9431ae4f7cd98f8c14f9b754b13acf174f4d1ff7.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
892bceb7a942609b678a4b8f9431ae4f7cd98f8c14f9b754b13acf174f4d1ff7.exe
Resource
win10v2004-20220812-en
General
-
Target
892bceb7a942609b678a4b8f9431ae4f7cd98f8c14f9b754b13acf174f4d1ff7
-
Size
248KB
-
MD5
4a6ecefc7e1a9c12ecd4eb9e81a00cc0
-
SHA1
34cd2a957cc0ad97a6e43300bcdd3bcae26f413d
-
SHA256
892bceb7a942609b678a4b8f9431ae4f7cd98f8c14f9b754b13acf174f4d1ff7
-
SHA512
c7ecd2504b337964d3a9c6ece59cf62e4d64a667a4b34db119e7eb220de3f20d01f86e8d00e14d59a904702aedfb6c9bfdacc33f00e298657f2fa287dbbf55f9
-
SSDEEP
3072:kOzZUBu7ftdPlykw1jHkZbjpcN9b+D7vQcv31DgRsTviE5jc5NMV0vQP58XyVsS/:f6Bun6LkZbjpE9b8JtTjcU+IugRBD
Malware Config
Signatures
Files
-
892bceb7a942609b678a4b8f9431ae4f7cd98f8c14f9b754b13acf174f4d1ff7.exe windows x86
13cacb74d084d3609da03f45da67e7e5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapFree
HeapAlloc
GetProcessHeap
DeleteFileW
CreateFileA
FreeLibrary
InterlockedExchange
InitializeCriticalSection
DeleteCriticalSection
InterlockedIncrement
InterlockedDecrement
lstrcmpiW
LoadLibraryExW
GetModuleHandleW
ResumeThread
SetPriorityClass
GetCurrentThread
RemoveDirectoryW
FindClose
SetFileAttributesW
FindNextFileW
FindFirstFileW
CopyFileW
SetEndOfFile
SetStdHandle
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetLocaleInfoW
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
GetStringTypeW
GetStringTypeA
IsValidCodePage
GetOEMCP
GetSystemTimeAsFileTime
GetCurrentProcessId
LoadLibraryW
QueryPerformanceCounter
GetCommandLineW
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
SetFilePointer
FlushFileBuffers
GetConsoleMode
GetConsoleCP
GetStartupInfoA
GetFileType
SetHandleCount
GetModuleFileNameA
GetStdHandle
HeapCreate
GetProcAddress
GetPrivateProfileStringW
GetPrivateProfileIntW
GetModuleFileNameW
WideCharToMultiByte
WaitForSingleObject
CreateFileW
WriteFile
CreateDirectoryW
MultiByteToWideChar
lstrlenW
GetLastError
FindResourceExW
FindResourceW
LoadResource
LockResource
SizeofResource
SetThreadPriority
Sleep
CreatePipe
TerminateThread
CreateProcessW
ReadFile
SetLastError
GetCurrentThreadId
CloseHandle
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetCPInfo
LCMapStringW
LCMapStringA
GetStartupInfoW
ExitProcess
GetModuleHandleA
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
CreateThread
ExitThread
RtlUnwind
GetThreadLocale
GetLocaleInfoA
GetACP
GetCurrentProcess
FlushInstructionCache
HeapSize
HeapReAlloc
HeapDestroy
GetVersionExA
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
LoadLibraryA
InterlockedCompareExchange
LeaveCriticalSection
EnterCriticalSection
RaiseException
GetTickCount
user32
GetActiveWindow
SendMessageW
SetWindowTextW
ShowWindow
IsWindowVisible
wvsprintfW
GetWindowRect
SystemParametersInfoW
DialogBoxParamW
SetWindowLongW
EndPaint
BeginPaint
GetParent
GetClientRect
MapWindowPoints
SetWindowPos
ExitWindowsEx
FillRect
GetSystemMetrics
LoadImageW
CreateWindowExW
GetDlgItem
GetWindowLongW
EndDialog
GetWindow
UnregisterClassA
PostQuitMessage
IsDialogMessageW
DefWindowProcW
CreateDialogParamW
DestroyWindow
CharNextW
PeekMessageW
GetMessageW
TranslateMessage
DispatchMessageW
wvsprintfA
OffsetRect
MoveWindow
gdi32
SetTextColor
SetBkMode
CreateFontIndirectW
GetTextExtentPoint32W
DeleteObject
CreatePatternBrush
GetObjectW
SelectObject
SetBrushOrgEx
GetStockObject
advapi32
RegDeleteKeyW
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
RegOpenKeyExW
RegQueryValueExA
RegEnumKeyExW
RegQueryInfoKeyW
RegCreateKeyExW
RegDeleteValueW
RegCloseKey
RegSetValueExW
RegOpenKeyExA
shell32
ShellExecuteA
SHGetSpecialFolderPathA
ShellExecuteW
SHChangeNotify
ole32
CoInitialize
CoUninitialize
CoTaskMemFree
CoCreateInstance
CoTaskMemRealloc
CoTaskMemAlloc
oleaut32
VarUI4FromStr
shlwapi
PathFileExistsW
PathRemoveFileSpecW
PathFileExistsA
StrCmpW
comctl32
InitCommonControlsEx
wininet
HttpOpenRequestA
InternetReadFile
InternetSetOptionW
HttpQueryInfoA
InternetOpenA
InternetConnectA
InternetCloseHandle
HttpAddRequestHeadersA
HttpEndRequestW
HttpSendRequestExW
InternetQueryDataAvailable
HttpQueryInfoW
Sections
.text Size: 144KB - Virtual size: 144KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 32KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
rfklmhe Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE