Static task
static1
Behavioral task
behavioral1
Sample
b0895f8f3c6fb210f27b0f5ba4159669025810a43e23bdbe1cf8b0334028ab9d.exe
Resource
win7-20220901-en
General
-
Target
b0895f8f3c6fb210f27b0f5ba4159669025810a43e23bdbe1cf8b0334028ab9d
-
Size
532KB
-
MD5
5ebbd2dbef43ef86c6b8025174b82981
-
SHA1
796cf69472110650b8cc7faf428c399e22b1d32f
-
SHA256
b0895f8f3c6fb210f27b0f5ba4159669025810a43e23bdbe1cf8b0334028ab9d
-
SHA512
61f35fe8c01512484ef1e77e3948fb53e6c43593a3443b393658e6d074ff7cf9eb245954f3492b02fb42e1c9ea06b81e5d79c0c35a5cd34c38399c29bca4e86a
-
SSDEEP
12288:nHoPE03f9OHkscSp62JvBw/noLKNe1qY7VUxnBaT4abYgdpx4fPv:nu9Mp5JpaoLb1qY/T4abDx43v
Malware Config
Signatures
Files
-
b0895f8f3c6fb210f27b0f5ba4159669025810a43e23bdbe1cf8b0334028ab9d.exe windows x86
af798b0452fb33cc606957705bf556a6
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
UnmapViewOfFile
MapViewOfFile
GetLastError
CreateFileMappingW
SetLastError
GetCurrentThreadId
DeleteCriticalSection
FlushInstructionCache
GetCurrentProcess
EnterCriticalSection
LeaveCriticalSection
InterlockedIncrement
InterlockedDecrement
GetModuleHandleW
GetModuleFileNameW
lstrlenW
InitializeCriticalSection
FreeLibrary
LoadLibraryExW
lstrcmpiW
GetPrivateProfileIntW
GetPrivateProfileStringW
GetTickCount
MoveFileExW
CreateEventW
SetEvent
WaitForSingleObject
WaitForMultipleObjects
DeleteFileW
CreateFileW
SetFilePointer
GetDiskFreeSpaceExW
WriteFile
ReadFile
GetFileSize
ResetEvent
SetWaitableTimer
CreateWaitableTimerW
CloseHandle
SetEnvironmentVariableA
CompareStringW
CompareStringA
FlushFileBuffers
CreateFileA
GetTimeZoneInformation
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
GetDateFormatA
GetTimeFormatA
GetStringTypeW
GetStringTypeA
LCMapStringW
FindResourceExW
LoadResource
LockResource
SizeofResource
lstrlenA
FindResourceW
RaiseException
lstrcpyW
WideCharToMultiByte
GetStdHandle
FatalAppExitA
HeapCreate
GetCurrentThread
LCMapStringA
GetLocaleInfoA
GetLocaleInfoW
GetConsoleMode
GetConsoleCP
GetModuleHandleA
IsValidCodePage
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
CreateThread
MultiByteToWideChar
GetOEMCP
GetACP
GetCPInfo
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetStartupInfoA
GetFileType
SetHandleCount
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
InitializeCriticalSectionAndSpinCount
InterlockedExchange
SetConsoleCtrlHandler
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
InterlockedCompareExchange
GetProcAddress
LoadLibraryA
IsProcessorFeaturePresent
VirtualFree
VirtualAlloc
RtlUnwind
Sleep
ExitProcess
GetStartupInfoW
ExitThread
GetModuleFileNameA
user32
UnregisterClassA
DestroyWindow
SetWindowLongW
CharNextW
LoadImageW
GetSystemMetrics
PostQuitMessage
SetTimer
KillTimer
SendMessageW
IsDialogMessageW
GetMessageW
TranslateMessage
DispatchMessageW
PostMessageW
DefWindowProcW
CreateDialogParamW
PeekMessageW
advapi32
RegOpenKeyExW
RegDeleteValueW
RegQueryInfoKeyW
RegSetValueExW
RegEnumKeyExW
RegCreateKeyExW
RegCloseKey
RegDeleteKeyW
shell32
SHGetSpecialFolderPathW
ShellExecuteW
ord165
ole32
CoCreateInstance
CoTaskMemFree
CoTaskMemAlloc
CoTaskMemRealloc
CoInitialize
CoUninitialize
oleaut32
VarUI4FromStr
SysFreeString
shlwapi
PathFileExistsW
PathAppendW
PathAddBackslashW
PathGetDriveNumberW
PathFindFileNameW
comctl32
InitCommonControlsEx
wininet
InternetQueryOptionW
InternetCrackUrlW
InternetCloseHandle
InternetSetStatusCallbackW
InternetReadFileExA
HttpEndRequestW
HttpSendRequestExW
HttpOpenRequestW
InternetConnectW
InternetOpenW
HttpQueryInfoW
InternetQueryDataAvailable
HttpSendRequestW
InternetSetOptionW
Sections
.text Size: 267KB - Virtual size: 266KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 37KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 153KB - Virtual size: 152KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rmnet Size: 56KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE