Static task
static1
Behavioral task
behavioral1
Sample
b289b9eb32915a64fdce33d8a2668474687d3d0c3292f2f424b4d3b382a158f2.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b289b9eb32915a64fdce33d8a2668474687d3d0c3292f2f424b4d3b382a158f2.exe
Resource
win10v2004-20220812-en
General
-
Target
b289b9eb32915a64fdce33d8a2668474687d3d0c3292f2f424b4d3b382a158f2
-
Size
1.3MB
-
MD5
9ca50b4ca9e7d3b6d3085d7249577e8e
-
SHA1
439b812ed829823ff0461fed313dd26bc3ff0c8b
-
SHA256
b289b9eb32915a64fdce33d8a2668474687d3d0c3292f2f424b4d3b382a158f2
-
SHA512
7676db75162f0d4c4c0da27cd62d660733c62190aaf0dd44c1ff20e84968e89295f8dba8e19e9d3bb1e54c0dda8f26f8d50a5ac58ac73134966c4709526f4288
-
SSDEEP
24576:IyEn9WYDZiYOVeB6ms457g/ppa9ZMOd/4x/5kiVtUpBUUSYg5sxh:IygDT2aaq9ZTo/CivoSYg5sv
Malware Config
Signatures
Files
-
b289b9eb32915a64fdce33d8a2668474687d3d0c3292f2f424b4d3b382a158f2.exe windows x86
e88d5777cac4c2c1dd207f96f8f708f7
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindFirstFileW
FindNextFileW
FindClose
CopyFileW
CreateThread
InitializeCriticalSection
EnterCriticalSection
GetLocalTime
LeaveCriticalSection
GetLogicalDriveStringsW
QueryDosDeviceW
GetFullPathNameW
GetLongPathNameW
GetFileInformationByHandle
CreateMutexW
ReleaseMutex
LoadLibraryW
Process32FirstW
GetCurrentProcess
GetVersionExW
GetSystemDirectoryW
GetVolumePathNameW
RemoveDirectoryW
VerSetConditionMask
VerifyVersionInfoW
MoveFileExW
CreateToolhelp32Snapshot
WriteFile
CreateDirectoryW
GetFileAttributesW
GetModuleHandleW
SetProcessShutdownParameters
GetTickCount
FormatMessageA
TerminateProcess
Sleep
Process32NextW
ReadFile
GetFileSize
CreateFileW
GetTempPathW
WideCharToMultiByte
MultiByteToWideChar
lstrlenW
GetCommandLineW
CloseHandle
CreateProcessW
LocalFree
GetLastError
WaitForSingleObject
ExitProcess
GetCurrentProcessId
GetEnvironmentVariableW
GetVolumeInformationW
OpenProcess
SetConsoleMode
ReadConsoleInputA
FlushConsoleInputBuffer
GlobalMemoryStatus
GetVersion
GetModuleHandleA
GetModuleFileNameW
GetProcAddress
SetEnvironmentVariableA
CompareStringW
WriteConsoleW
GetConsoleMode
GetConsoleCP
SetStdHandle
GetFullPathNameA
HeapReAlloc
CreateFileA
HeapCompact
SetFilePointer
TryEnterCriticalSection
MapViewOfFile
UnmapViewOfFile
SetEndOfFile
FreeLibrary
HeapAlloc
SystemTimeToFileTime
QueryPerformanceCounter
HeapFree
InterlockedCompareExchange
UnlockFile
LockFile
WaitForSingleObjectEx
OutputDebugStringW
UnlockFileEx
GetProcessHeap
GetSystemTimeAsFileTime
FormatMessageW
HeapDestroy
GetFileAttributesA
HeapCreate
HeapValidate
FlushFileBuffers
HeapSize
LockFileEx
GetDiskFreeSpaceW
LoadLibraryA
CreateFileMappingA
CreateFileMappingW
GetDiskFreeSpaceA
GetSystemInfo
GetFileAttributesExW
DeleteCriticalSection
GetCurrentThreadId
OutputDebugStringA
GetVersionExA
GetTempPathA
GetSystemTime
AreFileApisANSI
DeleteFileA
InterlockedIncrement
InterlockedDecrement
InterlockedExchange
EncodePointer
DecodePointer
HeapSetInformation
GetStartupInfoW
ExitThread
RaiseException
GetCPInfo
RtlUnwind
LCMapStringW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
GetStdHandle
InitializeCriticalSectionAndSpinCount
SetHandleCount
GetFileType
FreeEnvironmentStringsW
GetEnvironmentStringsW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
GetLocaleInfoW
GetTimeZoneInformation
GetACP
GetOEMCP
IsValidCodePage
GetStringTypeW
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
SetConsoleCtrlHandler
DeleteFileW
user32
CreateWindowExW
SetTimer
GetMessageW
RegisterClassExW
GetSystemMetrics
DefWindowProcW
GetUserObjectInformationW
CharLowerW
GetDesktopWindow
MessageBoxA
CharLowerA
DispatchMessageW
GetProcessWindowStation
advapi32
RegisterEventSourceA
CryptGetHashParam
CryptDestroyHash
CryptHashData
CryptReleaseContext
CryptCreateHash
CryptAcquireContextW
RegEnumKeyExW
RegQueryInfoKeyW
RegDeleteValueW
RegSetValueExW
RegCreateKeyExW
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
DeregisterEventSource
ReportEventA
shell32
CommandLineToArgvW
SHGetFolderPathW
ShellExecuteW
ole32
CoCreateGuid
wininet
InternetOpenW
InternetOpenUrlW
InternetCloseHandle
InternetSetOptionW
HttpQueryInfoA
shlwapi
AssocQueryStringW
psapi
GetProcessImageFileNameW
Sections
.text Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 212KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 880B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 55KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ