Static task
static1
Behavioral task
behavioral1
Sample
15dcdece159442cb9e53eda87ab0afed5fec3d5677c51592f2dc75e37b7eaa54.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
15dcdece159442cb9e53eda87ab0afed5fec3d5677c51592f2dc75e37b7eaa54.exe
Resource
win10v2004-20220812-en
General
-
Target
15dcdece159442cb9e53eda87ab0afed5fec3d5677c51592f2dc75e37b7eaa54
-
Size
588KB
-
MD5
24609f38304da383347d6f13bb3edb46
-
SHA1
53b98cbacde7df79c442a83b536dbd55702ca768
-
SHA256
15dcdece159442cb9e53eda87ab0afed5fec3d5677c51592f2dc75e37b7eaa54
-
SHA512
441f99b991f92cda60a22d63a4c04b79b7e1172afbf4e736f06a2bd9a53a7872ac0912d9a97d5d430373d94188adc997f0af047bfc1a4356a35d4cde192065a9
-
SSDEEP
12288:XigCTR/du4YUxa+o0t4uogoGOeeTJj4k6nQwjRsdy7+nNS:SLdZYUxNpd9oTJMfpR7A
Malware Config
Signatures
Files
-
15dcdece159442cb9e53eda87ab0afed5fec3d5677c51592f2dc75e37b7eaa54.exe windows x86
730c80741f50383875bf8e74226aaadc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
wininet
ShowClientAuthCerts
FtpGetFileEx
FindNextUrlCacheGroup
InternetAlgIdToStringW
InternetGetCertByURL
FreeUrlCacheSpaceW
InternetCombineUrlW
InternetGetConnectedState
ShowX509EncodedCertificate
shell32
SHGetSpecialFolderPathA
InternalExtractIconListA
DragQueryFileA
SHGetDiskFreeSpaceA
kernel32
LeaveCriticalSection
GetLastError
WriteFile
GetTempFileNameA
HeapSize
WideCharToMultiByte
TlsGetValue
GlobalFindAtomW
GetPrivateProfileIntW
GetDateFormatA
UnmapViewOfFile
TlsSetValue
GetCurrentThread
GetFileType
EnterCriticalSection
HeapReAlloc
GetModuleFileNameW
ReadFile
GetEnvironmentStringsA
DeleteCriticalSection
SetUnhandledExceptionFilter
TerminateProcess
InterlockedDecrement
GetSystemTimeAsFileTime
GetCurrentProcess
GetStringTypeA
InitializeCriticalSectionAndSpinCount
MultiByteToWideChar
CompareStringW
GetACP
SetStdHandle
GetCommandLineW
GetStartupInfoW
GetUserDefaultLCID
DeleteAtom
VirtualAlloc
GetTickCount
GetShortPathNameW
OpenEventW
CompareStringA
GetTimeZoneInformation
GetEnvironmentStringsW
LCMapStringA
InterlockedExchange
GetProfileIntA
GetTimeFormatA
ReadConsoleOutputW
GetConsoleOutputCP
GetModuleHandleA
GetConsoleMode
SystemTimeToTzSpecificLocalTime
FreeLibrary
SetEnvironmentVariableA
IsDebuggerPresent
GetCommandLineA
SetConsoleCtrlHandler
GetStringTypeW
VirtualQuery
InitializeCriticalSection
IsValidCodePage
InterlockedIncrement
HeapCreate
LoadResource
SetFilePointer
GetProcAddress
GetCurrentProcessId
GetStringTypeExW
CreateMutexA
FlushFileBuffers
HeapFree
TlsFree
VirtualFreeEx
GetOEMCP
OpenMutexA
SetLastError
WriteConsoleA
GetConsoleCP
lstrcmpiA
UnhandledExceptionFilter
CloseHandle
LCMapStringW
TlsAlloc
ExitProcess
FreeEnvironmentStringsW
FreeLibraryAndExitThread
WriteConsoleW
SetHandleCount
lstrlenW
GetLocaleInfoA
EnumSystemLocalesA
GetModuleFileNameA
HeapAlloc
GetStdHandle
CreateFileA
FlushConsoleInputBuffer
ReadConsoleOutputCharacterW
LoadLibraryA
SetCriticalSectionSpinCount
QueryPerformanceCounter
IsValidLocale
Sleep
GetModuleHandleW
FindFirstFileA
GetCPInfo
RtlUnwind
VirtualFree
HeapDestroy
GetStartupInfoA
FindNextFileW
SetLocaleInfoA
lstrlen
GetCurrentThreadId
GetLocaleInfoW
comctl32
CreateStatusWindow
ImageList_SetFlags
ImageList_Duplicate
ImageList_EndDrag
ImageList_SetImageCount
InitCommonControlsEx
ImageList_DragShowNolock
ImageList_GetImageRect
ImageList_LoadImageA
CreateToolbarEx
CreateStatusWindowA
user32
DdePostAdvise
PeekMessageA
GetShellWindow
IsCharUpperA
RegisterDeviceNotificationW
ShowWindow
RegisterClassA
RegisterClassExA
GetKeyNameTextW
CreateAcceleratorTableA
CharPrevA
MapVirtualKeyW
GetWindowRgn
RealChildWindowFromPoint
FindWindowA
MessageBeep
DestroyWindow
CreateWindowExW
ShowCaret
IsDialogMessageA
MessageBoxA
DefWindowProcA
CreatePopupMenu
GetCaretPos
IsDialogMessage
Sections
.text Size: 164KB - Virtual size: 160KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 260KB - Virtual size: 256KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 112KB - Virtual size: 129KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 48KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ