Static task
static1
Behavioral task
behavioral1
Sample
088aef3ff7aba4b772b0c4d4cf22ccfd6f55411336b76d57ecc9b3b520bb7397.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
088aef3ff7aba4b772b0c4d4cf22ccfd6f55411336b76d57ecc9b3b520bb7397.exe
Resource
win10v2004-20220812-en
General
-
Target
088aef3ff7aba4b772b0c4d4cf22ccfd6f55411336b76d57ecc9b3b520bb7397
-
Size
384KB
-
MD5
7ce2a6089bbad06db008580da695a892
-
SHA1
37fcd275d98aa2145cd4451cf8205ff1a42fb2e5
-
SHA256
088aef3ff7aba4b772b0c4d4cf22ccfd6f55411336b76d57ecc9b3b520bb7397
-
SHA512
159a238c00deba74329c95ab9d115046f70c88f3544fa745b8c59aa10e8841a09ef979fccdb104aaa33c7f31a8c6e8c0c1a6a958812d0f957022d0c7d77217ec
-
SSDEEP
6144:ryyElYDidHv/vDc6A4qjI1pJdOSBA71eK853fevVzgX5UVDAZYqppHwFHOA3ZGtH:qddP/vDc6A9jInJ8OA718mv5G5UV0ZYG
Malware Config
Signatures
Files
-
088aef3ff7aba4b772b0c4d4cf22ccfd6f55411336b76d57ecc9b3b520bb7397.exe windows x86
b3ffa5a527187dcdd1235d5ef42db7ff
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetSystemDirectoryA
GetShortPathNameA
GetModuleFileNameA
SetCurrentDirectoryA
GetCurrentDirectoryA
lstrcpyA
GetFileAttributesA
CreateDirectoryA
CloseHandle
WriteFile
SetFilePointer
ReadFile
GetFileSize
CreateFileA
GetWindowsDirectoryA
MoveFileExA
RemoveDirectoryA
SetFileAttributesA
FindClose
FindNextFileA
DeleteFileA
FindFirstFileA
CreateThread
ResetEvent
TerminateThread
WaitForSingleObject
GetCurrentThreadId
SetEvent
CreateEventA
LoadLibraryA
EnterCriticalSection
OpenEventA
IsBadReadPtr
IsBadWritePtr
InterlockedIncrement
InterlockedDecrement
lstrcpynA
GetTimeFormatA
GetSystemDefaultLangID
lstrlenW
WideCharToMultiByte
MultiByteToWideChar
ExpandEnvironmentStringsA
FileTimeToSystemTime
FileTimeToLocalFileTime
SystemTimeToFileTime
LocalFileTimeToFileTime
GetACP
GetPrivateProfileStringA
GetPrivateProfileStructA
WritePrivateProfileStringA
WritePrivateProfileStructA
GetLocalTime
GetLocaleInfoA
GetPrivateProfileSectionNamesA
GetPrivateProfileSectionA
lstrcatA
GetModuleHandleA
lstrcmpiA
Sleep
FreeLibrary
LeaveCriticalSection
GetProcAddress
InitializeCriticalSection
DeleteCriticalSection
GetVersionExA
LocalFree
LocalAlloc
GetLastError
ExitThread
WaitForMultipleObjects
lstrlenA
FreeEnvironmentStringsW
GetFileType
HeapSize
GetCurrentProcess
TerminateProcess
LCMapStringW
LCMapStringA
TlsAlloc
GetEnvironmentVariableA
TlsGetValue
SetLastError
ExitProcess
InterlockedExchange
SetEnvironmentVariableA
CompareStringW
HeapDestroy
CompareStringA
FlushFileBuffers
GetCPInfo
GetStartupInfoA
HeapReAlloc
TlsSetValue
GetSystemTime
GetTimeZoneInformation
HeapAlloc
HeapFree
RtlUnwind
HeapCreate
VirtualFree
GetCurrentProcessId
UnhandledExceptionFilter
VirtualAlloc
FreeEnvironmentStringsA
GetEnvironmentStrings
RaiseException
GetVersion
SetStdHandle
GetCommandLineA
GetStringTypeW
GetOEMCP
GetEnvironmentStringsW
GetStdHandle
SetUnhandledExceptionFilter
GetStringTypeA
IsBadCodePtr
SetHandleCount
user32
GetMessageA
wsprintfA
DispatchMessageA
PeekMessageA
CharNextA
PostThreadMessageA
SetTimer
PostQuitMessage
KillTimer
advapi32
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegSetValueExA
RegEnumKeyExA
RegCreateKeyExA
RegOpenKeyA
RegDeleteKeyA
FreeSid
RegQueryInfoKeyA
RegDeleteValueA
shell32
SHGetSpecialFolderLocation
SHGetPathFromIDListA
SHGetMalloc
SHFileOperationA
ole32
CoCreateGuid
CLSIDFromString
CoRevokeClassObject
CoRegisterClassObject
CoDisconnectObject
CoTaskMemAlloc
CoInitialize
CoUninitialize
CoCreateInstance
CoGetClassObject
StringFromGUID2
oleaut32
SafeArrayGetDim
SafeArrayAccessData
SafeArrayGetLBound
SafeArrayGetUBound
VariantCopy
SafeArrayUnaccessData
LoadTypeLi
RegisterTypeLi
UnRegisterTypeLi
VarDateFromStr
LoadRegTypeLi
VariantInit
VariantTimeToSystemTime
SystemTimeToVariantTime
SysAllocStringLen
VariantClear
SysFreeString
VariantChangeType
SysAllocString
VariantChangeTypeEx
SysStringLen
wininet
InternetQueryOptionA
InternetOpenA
InternetCrackUrlA
InternetConnectA
HttpOpenRequestA
HttpAddRequestHeadersA
HttpSendRequestA
InternetReadFile
HttpQueryInfoA
InternetCloseHandle
InternetCanonicalizeUrlA
version
GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA
shlwapi
SHDeleteEmptyKeyA
Sections
.text Size: 232KB - Virtual size: 229KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 32KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ordata Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE