Static task
static1
Behavioral task
behavioral1
Sample
32facbadbbd1d1eaba5ab2e93d186860d0b12c15eb656892d7b5ec0f80fd9f5c.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
32facbadbbd1d1eaba5ab2e93d186860d0b12c15eb656892d7b5ec0f80fd9f5c.exe
Resource
win10v2004-20220812-en
General
-
Target
32facbadbbd1d1eaba5ab2e93d186860d0b12c15eb656892d7b5ec0f80fd9f5c
-
Size
360KB
-
MD5
52057f44f0a2549601f372d73b3f5020
-
SHA1
577a2ea56174e6d47a437f729d2b12e10911a298
-
SHA256
32facbadbbd1d1eaba5ab2e93d186860d0b12c15eb656892d7b5ec0f80fd9f5c
-
SHA512
df6b7e706c5e7451994f6bb213833eca91e494eda2052605615d0a9e741e78b9168e8afa6c3980a825230f7a6663dffa3dc72880bbffc63d0c40c473a1e66173
-
SSDEEP
6144:Nu9mU0tHoumUs8hGi3iIuGRZRUp5/bOK9B6tz88/xuAaIcmAMzo0naGv:7U0tHtm184i3bhRZRu798tpTPaGv
Malware Config
Signatures
Files
-
32facbadbbd1d1eaba5ab2e93d186860d0b12c15eb656892d7b5ec0f80fd9f5c.exe windows x86
b4a79043b64c54391ade431a438a9d5e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
wininet
InternetGetConnectedState
InternetCanonicalizeUrlA
InternetCrackUrlA
InternetReadFile
HttpQueryInfoA
InternetOpenUrlA
InternetCloseHandle
InternetOpenA
winmm
timeGetTime
c8gamesdk
c8GameSDK_Init
c8GameSDK_QueryAdEx
c8GameSDK_Close
kernel32
TlsSetValue
LocalReAlloc
TlsFree
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
DuplicateHandle
GetCurrentProcess
GetVolumeInformationA
GetFullPathNameA
GetCPInfo
GetOEMCP
GetFileTime
SetErrorMode
ExitProcess
RtlUnwind
HeapFree
GetSystemTimeAsFileTime
TlsAlloc
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetStartupInfoA
GetCommandLineA
HeapReAlloc
HeapSize
SetStdHandle
GetFileType
QueryPerformanceCounter
SetUnhandledExceptionFilter
HeapDestroy
HeapCreate
VirtualFree
IsBadWritePtr
GetTimeZoneInformation
LCMapStringA
LCMapStringW
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetDriveTypeA
GetStringTypeA
GetStringTypeW
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
IsBadReadPtr
IsBadCodePtr
GetLocaleInfoW
SetEnvironmentVariableA
TlsGetValue
GlobalHandle
GlobalReAlloc
GlobalFlags
LeaveCriticalSection
EnterCriticalSection
LocalAlloc
FileTimeToLocalFileTime
FileTimeToSystemTime
InterlockedDecrement
InterlockedIncrement
MulDiv
FormatMessageA
LocalFree
GlobalFree
FreeResource
GlobalGetAtomNameA
GlobalFindAtomA
lstrcmpW
WaitForSingleObject
GlobalAddAtomA
GetCurrentThread
GetCurrentThreadId
GlobalAlloc
GlobalDeleteAtom
lstrcmpA
GetModuleHandleA
ConvertDefaultLocale
EnumResourceLanguagesA
CopyFileA
FindFirstFileA
SetLastError
lstrcpynA
FindNextFileA
FindClose
GetFileAttributesA
SetFilePointer
GetFileSize
ReadFile
CreateFileA
GlobalLock
WriteFile
GlobalUnlock
GetCurrentDirectoryA
SetCurrentDirectoryA
FreeLibrary
CreateDirectoryA
DeleteFileA
SetFileAttributesA
CreateProcessA
RemoveDirectoryA
MoveFileExA
CompareStringW
CompareStringA
lstrcmpiA
GetVersion
DeleteCriticalSection
InitializeCriticalSection
RaiseException
MultiByteToWideChar
lstrcatA
WinExec
GetLocalTime
lstrlenA
lstrcpyA
GetTickCount
CreateThread
GetPrivateProfileIntA
WideCharToMultiByte
LoadLibraryA
GetLastError
GetProcAddress
FindResourceA
LoadResource
LockResource
SizeofResource
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
GetModuleFileNameA
GetPrivateProfileStringA
OpenProcess
TerminateProcess
CloseHandle
Sleep
GetCurrentProcessId
WritePrivateProfileStringA
HeapAlloc
user32
RegisterClipboardFormatA
PostThreadMessageA
SetCapture
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
DrawTextExA
DrawTextA
TabbedTextOutA
CharNextA
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
wsprintfA
SetWindowContextHelpId
MapDialogRect
GetDesktopWindow
CreateDialogIndirectParamA
GetNextDlgTabItem
EndDialog
RegisterWindowMessageA
WinHelpA
GetCapture
CreateWindowExA
GetClassLongA
GetClassInfoExA
GetClassNameA
SetPropA
GetPropA
RemovePropA
SetFocus
IsChild
GetWindowTextA
GetForegroundWindow
SetActiveWindow
GetDlgItem
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
MessageBeep
MapWindowPoints
SetForegroundWindow
GetSubMenu
GetMenuItemID
GetMenuItemCount
GetSysColor
AdjustWindowRectEx
ScreenToClient
EqualRect
GetClassInfoA
RegisterClassA
SetWindowPlacement
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
SetWindowLongA
SetWindowPos
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
CopyRect
PtInRect
SetMenuItemBitmaps
GetFocus
ModifyMenuA
GetMenuState
EnableMenuItem
CheckMenuItem
GetMenuCheckMarkDimensions
LoadBitmapA
SetWindowsHookExA
CallNextHookEx
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
GetKeyState
PeekMessageA
GetCursorPos
ValidateRect
MessageBoxA
GetParent
GetWindowLongA
GetLastActivePopup
IsWindowEnabled
SetCursor
PostQuitMessage
PostMessageA
UnregisterClassA
CharUpperA
GetNextDlgGroupItem
InvalidateRgn
CopyAcceleratorTableA
SetRect
IsRectEmpty
DestroyMenu
GetTopWindow
IsWindowVisible
InvalidateRect
ReleaseDC
GetDC
GetWindowRect
GetWindow
SendDlgItemMessageA
UpdateWindow
SetDlgItemTextA
IsWindow
GetSystemMetrics
GetSysColorBrush
ReleaseCapture
GetMessagePos
LoadCursorA
LoadIconA
EnableWindow
KillTimer
SetTimer
GetClientRect
IsIconic
SendMessageA
DrawIcon
GetMenu
GrayStringA
gdi32
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
DeleteDC
GetViewportExtEx
OffsetViewportOrgEx
GetMapMode
DeleteObject
SetViewportOrgEx
SelectObject
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
GetTextColor
GetBkColor
GetStockObject
GetDeviceCaps
SetBkColor
SetTextColor
GetClipBox
CreateBitmap
GetRgnBox
GetPixel
CreateCompatibleDC
CombineRgn
CreateRectRgn
CreateRectRgnIndirect
GetObjectA
SetMapMode
RestoreDC
SaveDC
GetWindowExtEx
comdlg32
GetFileTitleA
winspool.drv
OpenPrinterA
ClosePrinter
DocumentPropertiesA
advapi32
RegQueryValueA
RegOpenKeyExA
RegSetValueExA
RegQueryValueExA
RegDeleteKeyA
RegEnumKeyA
RegOpenKeyA
RegCreateKeyExA
RegCloseKey
shell32
ShellExecuteA
comctl32
ord17
shlwapi
PathFindFileNameA
UrlUnescapeA
PathStripToRootA
PathFindExtensionA
PathIsUNCA
oledlg
ord8
ole32
OleInitialize
CoCreateGuid
CoTaskMemFree
CLSIDFromProgID
CLSIDFromString
CoRegisterMessageFilter
OleFlushClipboard
OleIsCurrentClipboard
CoRevokeClassObject
CoFreeUnusedLibraries
OleUninitialize
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CoTaskMemAlloc
oleaut32
OleCreateFontIndirect
VariantCopy
SysAllocString
SafeArrayDestroy
SystemTimeToVariantTime
SysAllocStringByteLen
SysStringLen
SysFreeString
SysAllocStringLen
VariantInit
VariantChangeType
VariantClear
ws2_32
connect
send
gethostname
htons
WSAStartup
gethostbyname
inet_addr
WSACleanup
getprotobyname
setsockopt
recv
inet_ntoa
socket
sendto
select
WSAGetLastError
closesocket
recvfrom
Sections
.text Size: 228KB - Virtual size: 226KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 60KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 56KB - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ