Static task
static1
Behavioral task
behavioral1
Sample
b12627e3083f1a5d4c9b43a52f8dbe0e4e2f50aeaeeb4092461ec7d790625171.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b12627e3083f1a5d4c9b43a52f8dbe0e4e2f50aeaeeb4092461ec7d790625171.exe
Resource
win10v2004-20220812-en
General
-
Target
b12627e3083f1a5d4c9b43a52f8dbe0e4e2f50aeaeeb4092461ec7d790625171
-
Size
753KB
-
MD5
1ce1d0c7ce3f0fe7a3ab92e602c09562
-
SHA1
5cddc842c359de3954bc602805d5160a140380f2
-
SHA256
b12627e3083f1a5d4c9b43a52f8dbe0e4e2f50aeaeeb4092461ec7d790625171
-
SHA512
a58ffd906bc00ae355687a37714af8119cb3a50195562195d307d6245223e3004b56cd2b8e15678aad69e63c5d59ed908676976b55ee2417997b92b3de79f70f
-
SSDEEP
12288:juKqCSBPAyD2W9ma/iS++J8znxgJGizqsq+aICcc+shorH2XsgVDxQzOGRur:judCoLhs+izxgJZqh+dcAaX1RcOGAr
Malware Config
Signatures
Files
-
b12627e3083f1a5d4c9b43a52f8dbe0e4e2f50aeaeeb4092461ec7d790625171.exe windows x86
ebe17e9c79f9dd3c6552973507eec131
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
wininet
InternetCloseHandle
DeleteUrlCacheEntryW
CommitUrlCacheEntryA
SetUrlCacheGroupAttributeA
ShowX509EncodedCertificate
user32
ModifyMenuW
CharLowerBuffA
GetWindowPlacement
MessageBoxA
GetPropW
DefWindowProcA
DdeAbandonTransaction
RegisterClassA
DestroyWindow
IntersectRect
GetWindowModuleFileNameW
GetParent
TrackMouseEvent
RegisterClassExA
GetClipboardFormatNameW
CallWindowProcW
ShowWindow
GetTabbedTextExtentA
SetMenuItemInfoW
GetWindowRgn
WinHelpA
CreateWindowExW
CopyIcon
shell32
SHGetFileInfoA
DragFinish
DragQueryFileA
RealShellExecuteExA
comctl32
InitCommonControlsEx
ImageList_AddIcon
ImageList_Remove
DrawInsert
ImageList_ReplaceIcon
ImageList_LoadImage
ImageList_SetIconSize
InitMUILanguage
ImageList_GetIconSize
ImageList_DragMove
CreatePropertySheetPageW
kernel32
HeapFree
FlushFileBuffers
GetProfileIntW
SetEnvironmentVariableA
CompareStringW
ExitProcess
GetLastError
GetOEMCP
GetCurrentThread
VirtualFree
ReadFile
WideCharToMultiByte
InterlockedDecrement
IsBadWritePtr
GetProcAddress
GetEnvironmentStrings
GetTimeZoneInformation
HeapReAlloc
CompareStringA
GetLocalTime
DeleteCriticalSection
GetTickCount
EnterCriticalSection
TlsFree
InitializeCriticalSection
TlsGetValue
DebugBreak
OpenMutexA
SetHandleCount
HeapValidate
RtlUnwind
OutputDebugStringA
FreeEnvironmentStringsA
SetConsoleCtrlHandler
InterlockedExchange
VirtualAlloc
WriteFile
LoadLibraryA
CloseHandle
GetStartupInfoA
MultiByteToWideChar
GetVersion
HeapCreate
QueryPerformanceCounter
LCMapStringA
GetSystemTimeAsFileTime
GetEnvironmentStringsW
SetStdHandle
GetStringTypeW
FreeEnvironmentStringsW
GetStringTypeA
GetStdHandle
GetModuleFileNameA
TlsAlloc
HeapDestroy
VirtualQuery
IsBadReadPtr
TerminateProcess
SetFilePointer
GetACP
GetFileType
UnhandledExceptionFilter
GetSystemTime
HeapAlloc
GetCPInfo
GetCurrentProcess
GetCommandLineA
CreateMutexA
TlsSetValue
InterlockedIncrement
GetCurrentProcessId
SetLastError
GetModuleHandleA
LCMapStringW
GetCurrentThreadId
LeaveCriticalSection
comdlg32
GetFileTitleW
ChooseColorW
FindTextW
Sections
.text Size: 92KB - Virtual size: 91KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 454KB - Virtual size: 453KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 129KB - Virtual size: 134KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ