Static task
static1
Behavioral task
behavioral1
Sample
12b25550e50677cc0ea596ded13cde53d349f25cb8dcf9442f7488eea0f6b9b7.exe
Resource
win7-20220901-en
General
-
Target
12b25550e50677cc0ea596ded13cde53d349f25cb8dcf9442f7488eea0f6b9b7
-
Size
322KB
-
MD5
0643706b11c5a9a13becea8bc7d0a640
-
SHA1
19478c594b72cf9d898c6c83c64d82e43298a959
-
SHA256
12b25550e50677cc0ea596ded13cde53d349f25cb8dcf9442f7488eea0f6b9b7
-
SHA512
1eb1196f630a5c2d9460e63ed97b6a25c52339e71e0c8bfae1bfc5cdbb2c6c1546d9e7aa3f83fc255a0f7348377095b0458732fb83ef7314d36d14b0b6c2c350
-
SSDEEP
6144:Ey46Tgl95zQ/9mOkk04GlZPRdCaRU1K9lzTzOFT0S736Q:Ey4agl95zWmORyDZ8ACchTzezD6Q
Malware Config
Signatures
Files
-
12b25550e50677cc0ea596ded13cde53d349f25cb8dcf9442f7488eea0f6b9b7.exe windows x86
8b9a7b91c3655c96d2529f01f370e7aa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
wininet
InternetConnectW
InternetReadFile
InternetQueryDataAvailable
InternetCrackUrlW
InternetCloseHandle
InternetOpenW
InternetOpenUrlW
HttpAddRequestHeadersW
HttpQueryInfoW
HttpSendRequestW
HttpOpenRequestW
InternetSetOptionW
kernel32
MoveFileW
WaitForSingleObject
OpenProcess
GetTickCount
CreateFileW
GetFileAttributesW
GetFileInformationByHandle
GetFileSize
GetFileTime
GetFileType
ReadFile
SetFilePointer
WriteFile
DuplicateHandle
GetCurrentProcess
GetLocalTime
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
FileTimeToDosDateTime
FileTimeToSystemTime
SystemTimeToFileTime
WideCharToMultiByte
MultiByteToWideChar
GlobalAlloc
GlobalFree
GetCommandLineW
LocalFree
GetLastError
SetLastError
RemoveDirectoryW
GetFileAttributesExW
DeleteFileW
GetProcAddress
GetModuleHandleA
ExpandEnvironmentStringsW
CreateMutexW
ReleaseMutex
GetCurrentProcessId
QueryPerformanceCounter
GetSystemTimeAsFileTime
CopyFileW
SetEndOfFile
SetFilePointerEx
FlushFileBuffers
GetCurrentThreadId
GetModuleHandleW
Sleep
RaiseException
IsDebuggerPresent
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
SetEnvironmentVariableA
DeleteCriticalSection
GetModuleHandleExW
TlsGetValue
TlsSetValue
TlsAlloc
TlsFree
GetModuleFileNameW
OpenEventW
SetEvent
CloseHandle
CreateDirectoryW
SetDllDirectoryW
SetUnhandledExceptionFilter
GetUserDefaultLCID
EnumSystemLocalesW
HeapSize
GetTimeZoneInformation
GetStdHandle
GetProcessHeap
GetEnvironmentStringsW
FreeEnvironmentStringsW
IsValidCodePage
GetACP
GetOEMCP
WriteConsoleW
LoadLibraryExW
ReadConsoleW
OutputDebugStringW
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetStartupInfoW
TerminateProcess
UnhandledExceptionFilter
GetCPInfo
RtlUnwind
ExitProcess
HeapAlloc
HeapReAlloc
GetConsoleMode
GetConsoleCP
SetStdHandle
HeapFree
EnterCriticalSection
FreeLibrary
LoadLibraryExA
EncodePointer
DecodePointer
GetStringTypeW
IsProcessorFeaturePresent
advapi32
RegCloseKey
RegEnumKeyExW
RegOpenKeyExW
RegDeleteValueW
RegDeleteKeyW
RegQueryValueExW
RegCreateKeyExW
RegQueryValueExA
RegOpenKeyExA
ole32
CoCreateGuid
iphlpapi
GetAdaptersInfo
Sections
.text Size: 189KB - Virtual size: 188KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 45KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 6KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 2B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 920B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 72KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE