Static task
static1
Behavioral task
behavioral1
Sample
e5f0b07abd1c6f68ca001f614a2c30be9e1117ac71833a6de1048ceebef7af20.exe
Resource
win7-20220812-en
General
-
Target
e5f0b07abd1c6f68ca001f614a2c30be9e1117ac71833a6de1048ceebef7af20
-
Size
313KB
-
MD5
6177fff2f6a0de5f1c7e8c1ef64aee33
-
SHA1
4ed9c8b941bc4d0b6827397cb0f739486bca52d6
-
SHA256
e5f0b07abd1c6f68ca001f614a2c30be9e1117ac71833a6de1048ceebef7af20
-
SHA512
f9099432084ee2a6d786f4242337267e7216466bf95571db2740d616cc6c3a440c13a33ebf8f42c971794e8bb5195b1bff27251a9e05527997c026f2c87509ac
-
SSDEEP
6144:Kl8NTc5fVnYvmP3bU1BrTBioci1ljrW2S:nTc5fdYOP3YjPt1PS
Malware Config
Signatures
Files
-
e5f0b07abd1c6f68ca001f614a2c30be9e1117ac71833a6de1048ceebef7af20.exe windows x86
1b960c21a58e0e8874d2ce46161293c0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
wininet
InternetCrackUrlW
version
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
kernel32
LoadResource
FindResourceW
LoadLibraryExW
GetModuleHandleW
CloseHandle
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
ReadProcessMemory
WriteProcessMemory
VirtualFreeEx
VirtualAllocEx
OpenProcess
GetCurrentProcessId
WaitForSingleObject
Sleep
CreateThread
CreateEventW
GetCommandLineW
GetProcAddress
LoadLibraryW
GetVersionExW
LockResource
FindResourceExW
GetCurrentThreadId
SetEvent
ExpandEnvironmentStringsW
LocalFree
FindClose
FindNextFileW
FindFirstFileW
GetCurrentProcess
CreateFileW
CreateDirectoryW
LocalAlloc
ReleaseMutex
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
OpenFileMappingW
lstrcpyW
WideCharToMultiByte
GetTempPathW
lstrcatW
GetComputerNameW
OpenEventW
CreateMutexW
WaitForMultipleObjects
GetTickCount
WriteFile
GetStringTypeW
GetStringTypeA
LoadLibraryA
QueryPerformanceCounter
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
SetFilePointer
ReadFile
GetStartupInfoA
GetFileType
SizeofResource
MultiByteToWideChar
FreeLibrary
GetModuleFileNameW
LeaveCriticalSection
EnterCriticalSection
InterlockedDecrement
InterlockedIncrement
lstrcmpiW
GetLastError
DeleteCriticalSection
InitializeCriticalSection
RaiseException
lstrlenW
WriteConsoleW
SetEndOfFile
SetHandleCount
LCMapStringW
LCMapStringA
IsValidCodePage
GetOEMCP
GetCPInfo
GetConsoleOutputCP
WriteConsoleA
FlushFileBuffers
SetStdHandle
CreateFileA
GetConsoleMode
GetConsoleCP
SetLastError
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetModuleFileNameA
GetStdHandle
ExitProcess
GetModuleHandleA
HeapCreate
VirtualAlloc
VirtualFree
GetStartupInfoW
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExA
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
RtlUnwind
GetSystemTimeAsFileTime
TerminateProcess
user32
PeekMessageW
MsgWaitForMultipleObjects
wsprintfW
UnregisterClassA
PostThreadMessageW
GetMessageW
DispatchMessageW
TranslateMessage
SendMessageW
GetWindowThreadProcessId
IsWindow
CharNextW
CharUpperW
advapi32
GetUserNameW
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges
RegLoadKeyW
RegUnLoadKeyW
RegNotifyChangeKeyValue
RegQueryValueExW
GetSecurityDescriptorLength
RegSetValueExA
RegEnumKeyExW
RegQueryInfoKeyW
RegSetValueExW
RegOpenKeyExW
RegCreateKeyExW
RegCloseKey
RegDeleteValueW
RegDeleteKeyW
shell32
SHGetFolderPathW
SHGetSpecialFolderPathW
SHGetSpecialFolderLocation
SHGetPathFromIDListW
SHGetMalloc
ole32
StringFromGUID2
CoTaskMemFree
CoCreateGuid
CoTaskMemAlloc
CoCreateInstance
CoUninitialize
CoRevokeClassObject
CoRegisterClassObject
CoInitialize
CoTaskMemRealloc
oleaut32
VarUI4FromStr
SysStringLen
SysAllocStringLen
RegisterTypeLi
UnRegisterTypeLi
SafeArrayGetUBound
SafeArrayCreateVector
SafeArrayAccessData
SafeArrayUnaccessData
SysAllocString
LoadTypeLi
LoadRegTypeLi
SysFreeString
shlwapi
SHCopyKeyW
SHDeleteKeyW
Sections
.text Size: 152KB - Virtual size: 150KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 8KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 112KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE