Static task
static1
Behavioral task
behavioral1
Sample
4e30a6da7ec785aae7d4e58c9adf50bb0dffba57cfa3e8de5f2f6cd5931dfc62.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
4e30a6da7ec785aae7d4e58c9adf50bb0dffba57cfa3e8de5f2f6cd5931dfc62.exe
Resource
win10v2004-20220812-en
General
-
Target
4e30a6da7ec785aae7d4e58c9adf50bb0dffba57cfa3e8de5f2f6cd5931dfc62
-
Size
476KB
-
MD5
3cfd9e95f280fa063efa4869f6ac08a0
-
SHA1
d5276d97c48a700a3ea68a0bd9aaae0a99884e3d
-
SHA256
4e30a6da7ec785aae7d4e58c9adf50bb0dffba57cfa3e8de5f2f6cd5931dfc62
-
SHA512
2fc368d50792534e7d7fe1071ed9b730b3d40caef7550c5ac01c9bd350c6ec45b8ca6e7c0bdd143683f2235bcb24c92f6b8091cbbb7bd403f87459ff6d30d914
-
SSDEEP
12288:ElFRUxIDVOrI28xz+vYgom0v0CpDPJwnO8SsPaW:6FEdITxzk6v0qDPJZ8So9
Malware Config
Signatures
Files
-
4e30a6da7ec785aae7d4e58c9adf50bb0dffba57cfa3e8de5f2f6cd5931dfc62.exe windows x86
4393f1c96a2e3c7662328705b84b5067
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comservice
??0CInternet@@QAE@XZ
?InternetGetURL@CInternet@@QAEHPBD00PAUHWND__@@@Z
??0CInetSession@@QAE@PBD0K@Z
??1CInetSession@@UAE@XZ
??1CInternet@@UAE@XZ
kernel32
RtlUnwind
HeapAlloc
HeapFree
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetSystemTimeAsFileTime
GetTimeFormatA
GetDateFormatA
GetStartupInfoA
GetCommandLineA
ExitProcess
HeapReAlloc
TerminateProcess
ExitThread
CreateThread
HeapSize
SetHandleCount
GetStdHandle
GetFileType
SetUnhandledExceptionFilter
LCMapStringA
LCMapStringW
HeapDestroy
HeapCreate
VirtualFree
IsBadWritePtr
GetTimeZoneInformation
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetCurrentProcessId
GetDriveTypeA
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
GetUserDefaultLCID
IsValidLocale
IsValidCodePage
SetEnvironmentVariableA
GetLocaleInfoW
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExA
SizeofResource
LockResource
LoadResource
FindResourceA
WideCharToMultiByte
FindClose
FindFirstFileA
FindNextFileA
RemoveDirectoryA
SetFileAttributesA
DeleteFileA
CreateDirectoryA
Sleep
GetTickCount
GetSystemDefaultLangID
CreateMutexA
OpenMutexA
WaitForSingleObject
GetLastError
CreateProcessA
GetPrivateProfileStringA
GetModuleFileNameA
OutputDebugStringA
lstrlenA
MultiByteToWideChar
GetVersion
lstrcmpiA
CompareStringA
CompareStringW
GetOEMCP
GetCPInfo
GetFileTime
GetFileAttributesA
SetErrorMode
GlobalFlags
GetCurrentDirectoryA
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
TlsGetValue
EnterCriticalSection
GlobalHandle
GlobalReAlloc
LeaveCriticalSection
LocalAlloc
InterlockedIncrement
DeleteCriticalSection
InitializeCriticalSection
RaiseException
GetSystemDirectoryA
GetWindowsDirectoryA
MoveFileA
FileTimeToLocalFileTime
FileTimeToSystemTime
GlobalGetAtomNameA
GlobalFindAtomA
lstrcatA
lstrcmpW
CreateFileA
GetFullPathNameA
GetVolumeInformationA
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
FreeResource
CreateEventA
SuspendThread
SetEvent
ResumeThread
CloseHandle
GlobalAddAtomA
InterlockedDecrement
GetCurrentThread
GetCurrentThreadId
FreeLibrary
GlobalDeleteAtom
lstrcmpA
GetModuleHandleA
GetProcAddress
ConvertDefaultLocale
EnumResourceLanguagesA
lstrcpyA
LoadLibraryA
SetLastError
GlobalFree
MulDiv
GlobalAlloc
GlobalLock
WritePrivateProfileStringA
GlobalUnlock
FormatMessageA
lstrcpynA
LocalFree
EnumSystemLocalesA
user32
RegisterClipboardFormatA
PostThreadMessageA
GetNextDlgGroupItem
InvalidateRgn
CopyAcceleratorTableA
IsRectEmpty
CharNextA
ReleaseCapture
SetCapture
LoadCursorA
GetSysColorBrush
DestroyMenu
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
RegisterWindowMessageA
WinHelpA
GetCapture
CreateWindowExA
GetClassLongA
GetClassInfoExA
GetClassNameA
SetPropA
GetPropA
SendDlgItemMessageA
SetFocus
IsChild
GetWindowTextLengthA
GetWindowTextA
GetForegroundWindow
GetTopWindow
GetMessageTime
GetMessagePos
MapWindowPoints
SetForegroundWindow
GetMenu
AdjustWindowRectEx
ScreenToClient
EqualRect
GetClassInfoA
RegisterClassA
UnregisterClassA
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
SetWindowLongA
IntersectRect
GetWindowPlacement
PtInRect
GetWindow
SetWindowContextHelpId
MapDialogRect
SetWindowPos
wsprintfA
GetDesktopWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
IsWindow
GetDlgItem
LoadBitmapA
DrawIcon
AppendMenuA
SendMessageA
PostMessageA
GetSystemMenu
RemovePropA
IsIconic
GetClientRect
GetDC
ReleaseDC
UpdateWindow
InvalidateRect
SetTimer
GetNextDlgTabItem
EndDialog
SetMenuItemBitmaps
ModifyMenuA
EnableMenuItem
CheckMenuItem
GetMenuCheckMarkDimensions
SetWindowsHookExA
CallNextHookEx
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
GetKeyState
PeekMessageA
GetCursorPos
ValidateRect
MessageBoxA
GetLastActivePopup
IsWindowEnabled
SetCursor
UnhookWindowsHookEx
PostQuitMessage
GetMenuState
GetMenuItemID
MessageBeep
KillTimer
EnableWindow
LoadIconA
GetSystemMetrics
DrawStateA
CopyRect
InflateRect
DrawFocusRect
GetParent
GetWindowLongA
SetRect
OffsetRect
GetWindowRect
IsWindowVisible
GetFocus
SystemParametersInfoA
CharUpperA
GetSysColor
FrameRect
SetWindowRgn
FindWindowA
GetSubMenu
GetMenuItemCount
gdi32
SetMapMode
MoveToEx
GetViewportExtEx
GetWindowExtEx
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
GetCurrentPositionEx
PolyDraw
ExtSelectClipRgn
CreatePen
CreateRectRgnIndirect
GetMapMode
GetBkColor
GetTextColor
GetRgnBox
SetBkMode
RestoreDC
SaveDC
GetObjectA
GetClipBox
GetDeviceCaps
GetStockObject
FrameRgn
CreateRoundRectRgn
CreateFontIndirectA
CreateBitmap
StretchBlt
SetBkColor
SetTextColor
DeleteDC
GetTextExtentPoint32A
CreateSolidBrush
CreateCompatibleBitmap
DeleteObject
BitBlt
SelectObject
CreateCompatibleDC
CreateFontA
msimg32
GradientFill
TransparentBlt
comdlg32
GetFileTitleA
winspool.drv
OpenPrinterA
DocumentPropertiesA
ClosePrinter
advapi32
RegCloseKey
RegOpenKeyA
RegQueryValueExA
RegOpenKeyExA
RegDeleteKeyA
RegQueryValueA
RegCreateKeyExA
RegSetValueExA
RegEnumKeyA
shell32
SHGetSpecialFolderPathA
comctl32
ord17
_TrackMouseEvent
shlwapi
PathFindFileNameA
PathStripToRootA
PathFindExtensionA
PathIsUNCA
oledlg
ord8
ole32
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
StgCreateDocfileOnILockBytes
CoTaskMemFree
CreateILockBytesOnHGlobal
OleUninitialize
CoFreeUnusedLibraries
CoRegisterMessageFilter
OleFlushClipboard
OleIsCurrentClipboard
CoRevokeClassObject
CoTaskMemAlloc
OleInitialize
oleaut32
SysFreeString
SysStringLen
SysAllocStringByteLen
SysAllocStringLen
VariantClear
VariantChangeType
VariantInit
VariantCopy
SafeArrayDestroy
SystemTimeToVariantTime
SysAllocString
OleCreateFontIndirect
Sections
.text Size: 268KB - Virtual size: 264KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 128KB - Virtual size: 125KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ