Static task
static1
Behavioral task
behavioral1
Sample
2e150f81f7e86354b1bd421b8c966cbe734e655b6a81fdad038b74e72f517cb1.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
2e150f81f7e86354b1bd421b8c966cbe734e655b6a81fdad038b74e72f517cb1.exe
Resource
win10v2004-20220812-en
General
-
Target
2e150f81f7e86354b1bd421b8c966cbe734e655b6a81fdad038b74e72f517cb1
-
Size
134KB
-
MD5
448668199c12040d2402e9f737ef0947
-
SHA1
b0ca2634f4e89b3cf581f5d5bc3b970e1d50cefd
-
SHA256
2e150f81f7e86354b1bd421b8c966cbe734e655b6a81fdad038b74e72f517cb1
-
SHA512
0369bf44add1a2a98df0a634fa4fa95321360762f445f7c69ab4894bf31150642f3c282c892881adf382830a3128476cae28a5a6a4a4b2dfd633d6deca941eb8
-
SSDEEP
3072:KHTYU8xGJ0h1Szp7RVRSY+Xr+Puf2bm3AjHn99qBm:oYU8AJ0Ep7rRSNb72bsQQm
Malware Config
Signatures
Files
-
2e150f81f7e86354b1bd421b8c966cbe734e655b6a81fdad038b74e72f517cb1.exe windows x86
0400c658ec9bbf6acf17dcf9bb9fd1b4
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
GetModuleHandleA
TerminateProcess
IsValidCodePage
GetDriveTypeW
FileTimeToLocalFileTime
FlushFileBuffers
WriteConsoleW
GetSystemTime
GetConsoleCP
HeapSize
FreeLibrary
DeleteCriticalSection
TlsSetValue
SetStdHandle
GetModuleFileNameA
GetProcAddress
GetStdHandle
LCMapStringA
lstrlenW
WideCharToMultiByte
GetVersionExW
GetTempPathW
VirtualFree
GetStringTypeA
SetEnvironmentVariableA
GetCurrentThreadId
GetEnvironmentStringsW
HeapFree
GetFileType
CloseHandle
FindFirstFileW
GetStartupInfoW
GetCurrentProcessId
SetUnhandledExceptionFilter
GetModuleHandleW
CompareStringW
LeaveCriticalSection
RtlUnwind
FormatMessageW
CompareStringA
GetConsoleMode
GetCurrentDirectoryA
MultiByteToWideChar
SetHandleCount
GetStringTypeW
GetACP
GetSystemInfo
GetTempFileNameW
GetOEMCP
WriteFile
VirtualAlloc
WriteConsoleA
GetStartupInfoA
EnterCriticalSection
GetLocaleInfoA
DeleteFileW
ReadFile
GetCommandLineW
TlsAlloc
TlsFree
FindNextFileW
CreateFileW
CreateDirectoryW
GetExitCodeProcess
GetSystemTimeAsFileTime
lstrcpyW
FileTimeToSystemTime
GetConsoleOutputCP
CompareFileTime
ExitProcess
LCMapStringW
LocalFree
HeapReAlloc
FreeEnvironmentStringsW
InterlockedDecrement
WaitForSingleObject
HeapCreate
FindClose
InitializeCriticalSectionAndSpinCount
Sleep
UnhandledExceptionFilter
lstrcatW
CreateFileA
TlsGetValue
IsDebuggerPresent
GetModuleFileNameW
LoadLibraryA
GetDriveTypeA
QueryPerformanceCounter
GetFullPathNameW
GetCPInfo
InterlockedIncrement
SetFilePointer
SetLastError
GetTickCount
GetTimeZoneInformation
RaiseException
GetProcessHeap
LockResource
VirtualProtect
GetVersion
GetCurrentProcess
HeapAlloc
LoadLibraryW
user32
GetForegroundWindow
wsprintfW
MessageBoxW
shell32
ShellExecuteExW
ole32
CoInitializeEx
IIDFromString
CoCreateInstance
CoUninitialize
CoTaskMemAlloc
CoTaskMemFree
CoInitialize
crypt32
CertGetNameStringW
CertFreeCertificateContext
rpcrt4
UuidToStringW
RpcStringFreeW
UuidCreate
wininet
HttpOpenRequestW
InternetConnectW
InternetCloseHandle
HttpSendRequestA
InternetOpenW
InternetCrackUrlW
HttpQueryInfoW
HttpAddRequestHeadersA
urlmon
IsValidURL
URLDownloadToFileW
msi
ord224
Sections
.text Size: 84KB - Virtual size: 83KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 13KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ