Static task
static1
Behavioral task
behavioral1
Sample
154ef8009f827ce79763d761e9c138e3f6f1a75383b14131971e9f2c2b5a0720.exe
Resource
win7-20220812-en
General
-
Target
154ef8009f827ce79763d761e9c138e3f6f1a75383b14131971e9f2c2b5a0720
-
Size
396KB
-
MD5
6b13c03604c1106a519e899439dfd1bd
-
SHA1
00d38850cd2c681c06e40a206bd7053bde35d0a4
-
SHA256
154ef8009f827ce79763d761e9c138e3f6f1a75383b14131971e9f2c2b5a0720
-
SHA512
484a436305b3458679be2689f4b306c149cc8427184afe72a006d099a909842c14cfc77c17d982f27d4f0245629fdbd9ad05dcac3dc6181d879fccfbf3728ba8
-
SSDEEP
6144:PMG/PKvZxT9W/VelsRcz+qh+Dt77hLGfP5HNwYh/IBgwhVuSrn3NptLzZ5hcOQ8:TgZxT9WSXBct71GX5HWY9YVuSL3NnVb
Malware Config
Signatures
Files
-
154ef8009f827ce79763d761e9c138e3f6f1a75383b14131971e9f2c2b5a0720.exe windows x86
7959038f5051801a98f6264864faa00e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
wininet
InternetQueryOptionA
InternetOpenA
InternetCrackUrlA
InternetConnectA
HttpOpenRequestA
HttpAddRequestHeadersA
InternetReadFile
HttpQueryInfoA
InternetCloseHandle
InternetCanonicalizeUrlA
HttpSendRequestA
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
shlwapi
SHDeleteEmptyKeyA
kernel32
GetStringTypeW
CloseHandle
EnterCriticalSection
LeaveCriticalSection
GetLastError
MultiByteToWideChar
GetVersionExA
GetACP
GetLocaleInfoA
GetThreadLocale
lstrlenW
LocalFree
LocalAlloc
InitializeCriticalSection
DeleteCriticalSection
FreeLibrary
GetProcAddress
LoadLibraryA
GetSystemDirectoryA
WideCharToMultiByte
InterlockedDecrement
InterlockedExchange
GetPrivateProfileStringA
GetPrivateProfileStructA
lstrlenA
WritePrivateProfileStringA
WritePrivateProfileStructA
InterlockedIncrement
GetLocalTime
FindClose
FindFirstFileA
GetPrivateProfileSectionNamesA
GetPrivateProfileSectionA
lstrcatA
lstrcpyA
GetModuleFileNameA
GetModuleHandleA
lstrcmpiA
IsBadWritePtr
IsBadReadPtr
VirtualProtect
GetCurrentThreadId
CreateEventA
WaitForSingleObject
WaitForMultipleObjects
GetSystemDefaultLangID
SetEvent
GetShortPathNameA
SetCurrentDirectoryA
GetCurrentDirectoryA
GetFileAttributesA
CreateDirectoryA
WriteFile
SetFilePointer
ReadFile
GetFileSize
CreateFileA
GetWindowsDirectoryA
MoveFileExA
RemoveDirectoryA
SetFileAttributesA
FindNextFileA
DeleteFileA
CreateThread
ResetEvent
TerminateThread
ExitThread
OpenEventA
lstrcpynA
GetTimeFormatA
ExpandEnvironmentStringsA
SystemTimeToFileTime
FileTimeToLocalFileTime
FileTimeToSystemTime
GetStringTypeA
IsBadCodePtr
VirtualQuery
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStdHandle
GetFileType
GetSystemInfo
SetStdHandle
QueryPerformanceCounter
SetEnvironmentVariableA
GetTickCount
FlushFileBuffers
CompareStringA
CompareStringW
Sleep
GetCurrentProcessId
GetTimeZoneInformation
HeapSize
SetUnhandledExceptionFilter
GetCPInfo
GetOEMCP
LCMapStringW
LCMapStringA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
ExitProcess
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
TlsGetValue
TlsSetValue
TlsFree
SetLastError
TlsAlloc
GetCommandLineA
GetStartupInfoA
HeapReAlloc
GetSystemTimeAsFileTime
RaiseException
HeapAlloc
HeapFree
RtlUnwind
user32
SetTimer
GetMessageA
PostQuitMessage
CharNextA
wsprintfA
KillTimer
PeekMessageA
PostThreadMessageA
DispatchMessageA
advapi32
RegEnumKeyExA
RegOpenKeyA
FreeSid
RegQueryInfoKeyA
RegDeleteValueA
RegDeleteKeyA
RegSetValueExA
RegCreateKeyExA
RegQueryValueExA
RegCloseKey
RegOpenKeyExA
shell32
SHFileOperationA
SHGetPathFromIDListA
SHGetSpecialFolderLocation
SHGetMalloc
ole32
CoUninitialize
CoTaskMemAlloc
StringFromGUID2
CoCreateGuid
CoDisconnectObject
CoRegisterClassObject
CoRevokeClassObject
CoCreateInstance
CLSIDFromString
CoGetClassObject
CoInitialize
oleaut32
SafeArrayAccessData
SafeArrayGetDim
SysAllocString
VariantChangeTypeEx
VariantChangeType
SysStringLen
SystemTimeToVariantTime
SafeArrayGetLBound
SafeArrayGetUBound
VariantCopy
SafeArrayUnaccessData
LoadTypeLi
RegisterTypeLi
UnRegisterTypeLi
VarDateFromStr
VariantTimeToSystemTime
SysAllocStringLen
SysFreeString
LoadRegTypeLi
VariantInit
VariantClear
Sections
.text Size: 248KB - Virtual size: 245KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 36KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 8KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE