Static task
static1
Behavioral task
behavioral1
Sample
d3b299be0eee907bc1c460453219fb7d648b5b8691dc415822ae8d0445113621.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d3b299be0eee907bc1c460453219fb7d648b5b8691dc415822ae8d0445113621.exe
Resource
win10v2004-20220812-en
General
-
Target
d3b299be0eee907bc1c460453219fb7d648b5b8691dc415822ae8d0445113621
-
Size
556KB
-
MD5
6004bbf1164b4a29984232c1bfe39590
-
SHA1
dc1ecc89790f796804af9190723271c907ba1ae5
-
SHA256
d3b299be0eee907bc1c460453219fb7d648b5b8691dc415822ae8d0445113621
-
SHA512
7236a6d34e015bb10064b91599c497e8f737ab28f6161a8111a0aa8727ecad50cccf9b8cfa9faf5a895269ac95a9603b317c17ff38b0c93c1d39396d9133f742
-
SSDEEP
6144:Et0A9LPijpgbHZPyWXGBoeRowX+Ty/ai2Ro3nEBE1QLJkQRdjJExPGyslnSmc:hA9rijpgNfXHPTy/aE3E21ckQ3tApmc
Malware Config
Signatures
Files
-
d3b299be0eee907bc1c460453219fb7d648b5b8691dc415822ae8d0445113621.exe windows x86
4bc47b1b60a84bd791e872571ef947cb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
wininet
InternetGetConnectedState
InternetOpenA
InternetReadFile
InternetOpenUrlW
HttpQueryInfoA
InternetSetOptionA
HttpQueryInfoW
InternetCloseHandle
kernel32
GlobalAlloc
DeleteFileW
GetCurrentThreadId
lstrlenW
GetLastError
InterlockedIncrement
InterlockedDecrement
lstrcmpiW
GlobalUnlock
GlobalLock
SetLastError
GlobalFree
GlobalHandle
lstrcmpW
MulDiv
GetModuleFileNameW
FreeLibrary
LoadLibraryExW
GetModuleHandleW
FreeResource
CloseHandle
WriteFile
CreateFileW
WaitForSingleObject
GetPrivateProfileStringW
GetTimeZoneInformation
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
GetDateFormatA
GetTimeFormatA
GetConsoleMode
GetConsoleCP
GetCurrentProcess
WideCharToMultiByte
GetLocaleInfoW
IsValidCodePage
GetOEMCP
GetCPInfo
SetConsoleCtrlHandler
EnterCriticalSection
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetStartupInfoA
GetFileType
SetHandleCount
GetCommandLineW
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
Sleep
ExitProcess
GetCurrentThread
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetModuleHandleA
GetModuleFileNameA
GetStdHandle
FatalAppExitA
HeapCreate
GetStartupInfoW
RtlUnwind
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
CreateThread
ExitThread
HeapSize
HeapReAlloc
HeapDestroy
VirtualAlloc
FlushInstructionCache
MultiByteToWideChar
FindResourceExW
FindResourceW
LoadResource
LockResource
SizeofResource
DeleteCriticalSection
InitializeCriticalSection
SetFilePointer
LeaveCriticalSection
RaiseException
CreateFileA
FlushFileBuffers
CompareStringA
InterlockedExchange
CompareStringW
SetEnvironmentVariableA
GetACP
GetLocaleInfoA
VirtualFree
IsProcessorFeaturePresent
LoadLibraryA
GetProcAddress
HeapAlloc
GetProcessHeap
HeapFree
InterlockedCompareExchange
GetVersionExA
GetThreadLocale
GetSystemTimeAsFileTime
user32
DefWindowProcW
UnregisterClassA
SetWindowTextW
GetWindowTextW
CharNextW
DestroyWindow
RegisterClassExW
SetWindowLongW
GetWindowLongW
ShowWindow
DispatchMessageW
TranslateMessage
PeekMessageW
GetWindowTextLengthW
ReleaseCapture
GetSystemMetrics
LoadImageW
GetCursorPos
CreateAcceleratorTableW
PostQuitMessage
GetWindowRect
SystemParametersInfoW
MapWindowPoints
IsDialogMessageW
SetWindowContextHelpId
PostMessageW
CreateWindowExW
MapDialogRect
IsWindow
SendMessageW
GetFocus
GetWindow
SetFocus
DestroyAcceleratorTable
GetDesktopWindow
BeginPaint
EndPaint
CallWindowProcW
FillRect
LoadCursorW
GetClassNameW
GetDlgItem
GetParent
IsChild
SetCapture
RedrawWindow
InvalidateRgn
InvalidateRect
ReleaseDC
GetDC
ScreenToClient
ClientToScreen
GetClientRect
SetWindowPos
MoveWindow
GetSysColor
CreateDialogIndirectParamW
RegisterWindowMessageW
GetClassInfoExW
GetMessageW
gdi32
GetObjectW
CreateSolidBrush
GetDeviceCaps
BitBlt
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
DeleteObject
DeleteDC
GetStockObject
advapi32
RegOpenKeyExW
RegDeleteValueW
RegEnumKeyExW
RegQueryInfoKeyW
RegSetValueExW
RegCreateKeyExW
RegCloseKey
RegDeleteKeyW
shell32
SHGetSpecialFolderPathW
SHCreateDirectoryExW
ole32
CoTaskMemAlloc
CoTaskMemRealloc
CoCreateInstance
CoTaskMemFree
CreateStreamOnHGlobal
OleInitialize
OleUninitialize
StringFromGUID2
OleLockRunning
CoGetClassObject
CLSIDFromProgID
CLSIDFromString
CoUninitialize
CoInitialize
oleaut32
CreateErrorInfo
SetErrorInfo
GetErrorInfo
VariantChangeType
DispCallFunc
LoadTypeLi
SysStringLen
SysFreeString
SysAllocStringLen
SysAllocString
VarUI4FromStr
SysStringByteLen
VariantInit
VariantClear
OleCreateFontIndirect
LoadRegTypeLi
shlwapi
PathFileExistsW
comctl32
InitCommonControlsEx
Sections
.text Size: 212KB - Virtual size: 211KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 36KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 249KB - Virtual size: 251KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE