Static task
static1
Behavioral task
behavioral1
Sample
a1a3e7356f8261cd0f66912f7ab97353938f6d8fed555b3a4a09cbfc62e6d134.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a1a3e7356f8261cd0f66912f7ab97353938f6d8fed555b3a4a09cbfc62e6d134.exe
Resource
win10v2004-20220901-en
General
-
Target
a1a3e7356f8261cd0f66912f7ab97353938f6d8fed555b3a4a09cbfc62e6d134
-
Size
139KB
-
MD5
33f9cc07d7b738f01b8364ab1650f270
-
SHA1
86e46bebaceb752d08b4f3936a4c2a0c54f87307
-
SHA256
a1a3e7356f8261cd0f66912f7ab97353938f6d8fed555b3a4a09cbfc62e6d134
-
SHA512
c69ebf17e593b72a13556552d5e9137f4c16b3b823dee6a4b6da66433741036b5d17d4d7a7044487d9aa9463ef1396e79106bf12ef00db29eb2de0d01dcddd7c
-
SSDEEP
3072:sY4pGm4PV0KN1rMpOUIsrBRoFIKsiG0IpKZszCFJa1w5b/:sY4Em4ZwpOUIsrkJsi2pKZsWJa1w5b/
Malware Config
Signatures
Files
-
a1a3e7356f8261cd0f66912f7ab97353938f6d8fed555b3a4a09cbfc62e6d134.exe windows x86
21e035b265e7d517c0ef62883eada898
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcmpW
SetLastError
EnterCriticalSection
LeaveCriticalSection
lstrlenW
GetSystemInfo
GetVersionExW
SetFileAttributesW
MultiByteToWideChar
WideCharToMultiByte
CreateEventW
GetLastError
GetCommandLineW
Sleep
CloseHandle
SizeofResource
LockResource
LoadResource
FindResourceExW
FindResourceW
ReadFile
CreateFileW
GetFileSize
HeapAlloc
RemoveDirectoryW
HeapFree
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetStartupInfoW
InterlockedExchange
HeapSize
HeapReAlloc
HeapDestroy
GetVersionExA
DeleteCriticalSection
InitializeCriticalSection
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
LoadLibraryA
GetProcAddress
InterlockedCompareExchange
FlushInstructionCache
GetCurrentProcess
FindNextFileW
DeleteFileW
FindClose
RaiseException
GetCurrentThreadId
FindFirstFileW
GetProcessHeap
user32
SetWindowLongW
CreateWindowExW
LoadCursorW
UnregisterClassA
CallWindowProcW
DefWindowProcW
SetTimer
PeekMessageW
GetMessageW
TranslateMessage
DispatchMessageW
DestroyWindow
GetDesktopWindow
GetClassInfoExW
RegisterClassExW
PostQuitMessage
KillTimer
GetWindowLongW
shell32
SHGetSpecialFolderPathW
msvcp80
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@@Z
??$?H_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@ABV10@0@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
?npos@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@2IB
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
?rfind@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEI_WI@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDI@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?find@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIABV12@I@Z
?clear@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXXZ
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
?compare@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEHPB_W@Z
?find@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WI@Z
??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
??$?H_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA?AV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@ABV10@PB_W@Z
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ
?find@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEI_WI@Z
?substr@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV12@II@Z
??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z
??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z
shlwapi
PathIsDirectoryW
common
??1CTXStringW@@QAE@XZ
?GetZipFile@CZipFiles@@QAE_NABVCTXStringW@@0@Z
?Clear@CZipFiles@@QAEXXZ
??0CTXStringW@@QAE@PB_W@Z
??0CZipFiles@@QAE@XZ
??0CTXStringW@@QAE@PA_W@Z
??1CZipFiles@@QAE@XZ
?AddFile@CZipFiles@@QAE_NABVCTXStringW@@0@Z
wininet
InternetWriteFile
InternetOpenW
InternetCloseHandle
InternetConnectW
HttpOpenRequestW
HttpSendRequestExW
HttpEndRequestW
InternetReadFile
msvcr80
__CxxFrameHandler3
_controlfp_s
_invoke_watson
_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_except_handler4_common
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
??3@YAXPAX@Z
swprintf_s
memset
wcstoul
_recalloc
wcsncat_s
wcscmp
malloc
strchr
free
_vsnwprintf_s
wcsstr
memcpy_s
memmove_s
wcslen
??0exception@std@@QAE@ABQBD@Z
_wtoi
??0exception@std@@QAE@ABV01@@Z
??1exception@std@@UAE@XZ
?what@exception@std@@UBEPBDXZ
??2@YAPAXI@Z
_invalid_parameter_noinfo
??0exception@std@@QAE@XZ
_wcsicmp
memcmp
wcsrchr
_wcslwr_s
_vscwprintf
vswprintf_s
memcpy
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
?terminate@@YAXXZ
_amsg_exit
__wgetmainargs
_cexit
_exit
_XcptFilter
exit
_wcmdln
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
_CxxThrowException
Sections
.text Size: 36KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE