Static task
static1
Behavioral task
behavioral1
Sample
2cba6e29ad6e4ceeff4c0abafda74fe5b59c3d33a186f10eb14e5610f0085674.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2cba6e29ad6e4ceeff4c0abafda74fe5b59c3d33a186f10eb14e5610f0085674.exe
Resource
win10v2004-20220812-en
General
-
Target
2cba6e29ad6e4ceeff4c0abafda74fe5b59c3d33a186f10eb14e5610f0085674
-
Size
351KB
-
MD5
96d42435a9d01114e9b5b2a542900390
-
SHA1
500f980a854ac9e094ecc2ba4bf4743b3a5c3e13
-
SHA256
2cba6e29ad6e4ceeff4c0abafda74fe5b59c3d33a186f10eb14e5610f0085674
-
SHA512
0c1a8be8d01514f5d51990739bec9c1db9d5d742d5e38af7a5d3b6747fea23cfa0b5bb934da18d2e643a3961e27a067f201f9eac0e59e44cce171300e0fe639b
-
SSDEEP
6144:sPO+4Do7DXK/m1soYRmd4PToEKTu0ORpTBJlzq:qO+S4XYWsoS7oEKTtupTj
Malware Config
Signatures
Files
-
2cba6e29ad6e4ceeff4c0abafda74fe5b59c3d33a186f10eb14e5610f0085674.exe windows x86
02308ca238a7350b6f1006ebb50f83a0
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
version
GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA
urlmon
URLDownloadToCacheFileA
wininet
InternetCrackUrlA
InternetOpenA
InternetCloseHandle
InternetConnectA
InternetReadFile
InternetSetOptionA
HttpOpenRequestA
HttpSendRequestA
HttpQueryInfoA
kernel32
GetTempPathA
WideCharToMultiByte
GetProcAddress
GetModuleHandleA
HeapAlloc
HeapFree
GetProcessHeap
GetCurrentProcessId
GetFileSize
GetFileSizeEx
WriteFile
ReadFile
FlushFileBuffers
SetEndOfFile
SetFilePointer
FindClose
GetSystemTimeAsFileTime
CreateDirectoryA
CreateFileA
FindFirstFileA
LocalFree
GetCurrentProcess
MultiByteToWideChar
GetVersion
InterlockedIncrement
InterlockedDecrement
GlobalAlloc
GlobalLock
GlobalUnlock
FlushInstructionCache
RaiseException
GetCurrentThreadId
SetLastError
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
MulDiv
lstrcmpA
OpenMutexA
FreeLibrary
GetEnvironmentStringsW
LoadLibraryExA
FindResourceA
FindResourceExW
lstrlenA
GetModuleHandleW
GetStartupInfoW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCPInfo
GetCommandLineA
LoadLibraryExW
VirtualQuery
VirtualProtect
GetSystemInfo
AreFileApisANSI
IsDebuggerPresent
RtlUnwind
GetStringTypeW
EncodePointer
DecodePointer
VirtualFree
VirtualAlloc
IsProcessorFeaturePresent
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
InterlockedCompareExchange
HeapSize
HeapReAlloc
GetConsoleCP
HeapDestroy
FindResourceW
GetModuleFileNameA
GetConsoleMode
MoveFileExW
GetFileType
GetModuleHandleExW
ExitProcess
GetModuleFileNameW
GetStdHandle
FreeEnvironmentStringsW
OutputDebugStringW
LoadLibraryW
SetFilePointerEx
SetStdHandle
CreateMutexA
GetTickCount
CloseHandle
SizeofResource
LoadResource
Sleep
GetLastError
LockResource
IsDBCSLeadByte
QueryPerformanceCounter
WriteConsoleW
CreateFileW
ReadConsoleW
GetOEMCP
LCMapStringW
GetACP
IsValidCodePage
lstrcmpiA
user32
LoadCursorA
GetWindow
GetClassNameA
GetParent
GetDesktopWindow
SetWindowLongA
GetWindowLongA
GetSysColor
ScreenToClient
ClientToScreen
GetClientRect
GetWindowTextLengthA
GetWindowTextA
SetWindowTextA
RedrawWindow
InvalidateRgn
InvalidateRect
EndPaint
BeginPaint
ReleaseDC
GetDC
DestroyAcceleratorTable
CreateAcceleratorTableA
ReleaseCapture
SetCapture
GetFocus
SetFocus
CharNextA
GetDlgItem
SetWindowPos
MoveWindow
DestroyWindow
IsChild
IsWindow
CreateWindowExA
GetClassInfoExA
RegisterClassExA
CallWindowProcA
DefWindowProcA
SendMessageA
RegisterWindowMessageA
PostMessageA
UnregisterClassA
FillRect
gdi32
GetStockObject
GetDeviceCaps
DeleteObject
SelectObject
CreateSolidBrush
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt
DeleteDC
GetObjectA
advapi32
RegEnumKeyExA
RegDeleteKeyA
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegEnumValueA
RegCreateKeyExA
RegCloseKey
RegDeleteValueA
RegQueryInfoKeyW
shell32
SHGetFolderPathA
ShellExecuteExA
ole32
CoUninitialize
CoInitialize
CoCreateInstance
CoTaskMemFree
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
StringFromGUID2
CoTaskMemAlloc
OleInitialize
OleUninitialize
OleLockRunning
CoCreateGuid
CoTaskMemRealloc
CreateStreamOnHGlobal
oleaut32
SysStringLen
VariantInit
VariantClear
LoadTypeLi
LoadRegTypeLi
SysFreeString
VarUI4FromStr
SysAllocStringLen
OleCreateFontIndirect
SysAllocString
shlwapi
UrlEscapeA
comctl32
InitCommonControlsEx
Sections
.text Size: 266KB - Virtual size: 265KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ