Static task
static1
Behavioral task
behavioral1
Sample
fbe444ea518cea02330b104086aa1b113f02fbeb9073e08bad1f60b7106444d8.exe
Resource
win7-20220812-en
General
-
Target
fbe444ea518cea02330b104086aa1b113f02fbeb9073e08bad1f60b7106444d8
-
Size
1.1MB
-
MD5
13b2d4d40312c26168fbc26b5bb409b0
-
SHA1
ad4e5397d1a9f0e42593f7827437c8f99c81a7f2
-
SHA256
fbe444ea518cea02330b104086aa1b113f02fbeb9073e08bad1f60b7106444d8
-
SHA512
261cd5f5a80c2ff7f2eeecf05afc0beff2c73112efd1573e5e8e528e0320009f6b3e288563a56a7a71d358ac9a55b21a74205c9347577ae39a30cc832d403537
-
SSDEEP
24576:2vlvJQsxDHiL4luXECCg+3/EZ3pSWOrTzd8:2fQ8uLlECC23pSW6Tx8
Malware Config
Signatures
Files
-
fbe444ea518cea02330b104086aa1b113f02fbeb9073e08bad1f60b7106444d8.exe windows x86
c0d9ae06debb7531757f9d2aec0cb277
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
version
VerQueryValueW
wininet
InternetSetOptionW
HttpOpenRequestW
InternetCloseHandle
kernel32
GetModuleHandleA
EnterCriticalSection
LeaveCriticalSection
GetFileSize
GetFileSizeEx
WriteFile
ReadFile
FlushFileBuffers
SetEndOfFile
SetFilePointer
FindClose
GetSystemTimeAsFileTime
GetFileAttributesW
FindFirstFileW
PeekNamedPipe
LocalAlloc
LocalFree
GetCurrentProcess
InitializeCriticalSection
DeleteCriticalSection
LoadLibraryA
FreeLibrary
TerminateProcess
GetVersion
InterlockedIncrement
InterlockedDecrement
GlobalAlloc
GlobalLock
GlobalUnlock
FlushInstructionCache
RaiseException
GetCurrentThreadId
InitializeCriticalSectionAndSpinCount
MulDiv
lstrcmpW
CreateMutexW
OpenMutexW
CreateThread
FindResourceW
lstrcmpiW
LoadLibraryExW
GetStdHandle
QueryPerformanceCounter
GlobalMemoryStatus
SetLastError
FlushConsoleInputBuffer
GetStartupInfoW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCPInfo
SetConsoleMode
ReadConsoleInputA
GetConsoleMode
SetConsoleCtrlHandler
AreFileApisANSI
GetModuleHandleExW
ExitProcess
GetCommandLineW
IsDebuggerPresent
RtlUnwind
GetStringTypeW
EncodePointer
DecodePointer
VirtualFree
VirtualAlloc
IsProcessorFeaturePresent
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
InterlockedCompareExchange
GetConsoleCP
HeapSize
HeapReAlloc
HeapDestroy
GetCurrentProcessId
GetOEMCP
GetModuleHandleW
GetModuleFileNameW
LoadLibraryW
GetTickCount
GetTimeZoneInformation
CloseHandle
SizeofResource
LoadResource
Sleep
GetLastError
GetProcAddress
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
IsValidCodePage
GetACP
GetProcessHeap
HeapFree
HeapAlloc
GetMailslotInfo
GetFileType
OpenThread
WideCharToMultiByte
MultiByteToWideChar
FindNextFileW
CreateFileW
GetDiskFreeSpaceW
GetTempPathW
GetVersionExA
FindResourceExW
LockResource
OutputDebugStringW
WriteConsoleW
SetEnvironmentVariableA
SetFilePointerEx
SetStdHandle
ReadConsoleW
FreeEnvironmentStringsW
WaitForMultipleObjects
GetEnvironmentStringsW
user32
GetUserObjectInformationW
FindWindowExW
GetProcessWindowStation
LoadCursorW
GetWindow
GetClassNameW
GetParent
GetDesktopWindow
SetWindowLongW
GetWindowLongW
FillRect
GetSysColor
ScreenToClient
MessageBoxA
ClientToScreen
GetClientRect
GetWindowTextW
SetWindowTextW
RedrawWindow
InvalidateRgn
InvalidateRect
EndPaint
BeginPaint
ReleaseDC
GetDC
DestroyAcceleratorTable
CreateAcceleratorTableW
ReleaseCapture
SetCapture
GetFocus
SetFocus
CharNextW
GetDlgItem
SetWindowPos
MoveWindow
DestroyWindow
IsChild
IsWindow
CreateWindowExW
GetClassInfoExW
RegisterClassExW
CallWindowProcW
DefWindowProcW
SendMessageW
RegisterWindowMessageW
PostMessageW
UnregisterClassW
GetWindowTextLengthW
gdi32
GetObjectW
SelectObject
GetStockObject
GetDeviceCaps
DeleteDC
CreateSolidBrush
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt
DeleteObject
advapi32
RegSetValueExW
RegQueryValueExW
RegOpenKeyExW
RegEnumValueW
RegEnumKeyExW
RegDeleteKeyW
RegCreateKeyExW
RegCloseKey
GetSidSubAuthority
GetSidSubAuthorityCount
RegDeleteValueW
RegQueryInfoKeyW
DeregisterEventSource
ReportEventA
RegisterEventSourceA
GetTokenInformation
ole32
CoTaskMemAlloc
StringFromGUID2
CLSIDFromProgID
CLSIDFromString
OleInitialize
CoTaskMemFree
CoCreateInstance
CoUninitialize
CoInitialize
OleUninitialize
OleLockRunning
CreateStreamOnHGlobal
CoTaskMemRealloc
CoGetClassObject
oleaut32
SysStringLen
VariantInit
VariantClear
LoadTypeLi
LoadRegTypeLi
SysFreeString
VarUI4FromStr
SysAllocStringLen
OleCreateFontIndirect
SysAllocString
comctl32
InitCommonControlsEx
Sections
.text Size: 779KB - Virtual size: 778KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 254KB - Virtual size: 254KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 25KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rmnet Size: 56KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE