Static task
static1
Behavioral task
behavioral1
Sample
678878746f358b084cee4da3b01dd8dbddf439349156496298468563689784ba.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
678878746f358b084cee4da3b01dd8dbddf439349156496298468563689784ba.exe
Resource
win10v2004-20220812-en
General
-
Target
678878746f358b084cee4da3b01dd8dbddf439349156496298468563689784ba
-
Size
455KB
-
MD5
89e669d6e7646ae5cb649673d84ba821
-
SHA1
12a18148d6a116a508206e20f0fdb901eb62ae65
-
SHA256
678878746f358b084cee4da3b01dd8dbddf439349156496298468563689784ba
-
SHA512
3d8a43a485f07edf038425b18e91a86db0aec735327fffe2d7fd0b4b512e1273dc1a67648a6966e4773cff00c31a878b4f238cf5189a2aa83881a92f11284260
-
SSDEEP
12288:uuBa5iP7HXqUbla7aVdoiQDSC253Swom:uUFbqU07adwuC2kDm
Malware Config
Signatures
Files
-
678878746f358b084cee4da3b01dd8dbddf439349156496298468563689784ba.exe windows x86
ba57e60c61b8497e87d1258513aedefb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
ShellExecuteExA
DragFinish
ExtractIconA
SHBrowseForFolderA
wininet
InternetSetDialStateW
FtpGetCurrentDirectoryA
ShowX509EncodedCertificate
InternetFindNextFileA
CreateUrlCacheContainerW
InternetGetConnectedStateExA
FindFirstUrlCacheGroup
InternetFindNextFileW
gdi32
DeleteDC
GetBitmapBits
GetFontData
EqualRgn
AngleArc
GetEnhMetaFilePaletteEntries
SetMapMode
GetDCOrgEx
GetRandomRgn
GetTextExtentExPointW
GetTextMetricsW
GetICMProfileA
ExtFloodFill
GetTextExtentPoint32A
GetCharWidth32W
FrameRgn
GetTextAlign
SetColorSpace
GetPixel
SetBoundsRect
GdiFlush
GdiPlayJournal
SetSystemPaletteUse
SetLayout
SetICMMode
kernel32
FreeEnvironmentStringsW
GetCommandLineW
SetConsoleCtrlHandler
OutputDebugStringW
GetCurrentProcess
GetLocaleInfoA
SetStdHandle
GetCurrentThreadId
WriteConsoleW
EnumSystemLocalesA
RaiseException
GetVersion
CreateFileA
LoadLibraryExW
OpenEventW
SetVolumeLabelW
HeapValidate
HeapAlloc
WriteConsoleA
GetCurrentThread
CreateDirectoryExA
FlushFileBuffers
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetEnvironmentStrings
GetStringTypeW
GetStartupInfoA
IsDebuggerPresent
GetExitCodeProcess
GetConsoleMode
GetProcAddress
TerminateProcess
RtlUnwind
OutputDebugStringA
PulseEvent
MultiByteToWideChar
WideCharToMultiByte
GetModuleFileNameW
GetConsoleOutputCP
SetFilePointer
GetACP
GetTickCount
lstrcmpA
FreeLibrary
GetVersionExA
GetCommandLineA
GetStartupInfoW
VirtualAlloc
LeaveCriticalSection
lstrlenA
EnterCriticalSection
GetOEMCP
WaitForMultipleObjectsEx
CloseHandle
GetModuleHandleA
TlsSetValue
VirtualFree
InterlockedIncrement
GetLocaleInfoW
GetProcessHeap
SetCriticalSectionSpinCount
UnhandledExceptionFilter
GlobalAlloc
IsValidLocale
GetStringTypeA
SetLastError
InterlockedExchange
LCMapStringW
CompareStringA
InterlockedDecrement
HeapDestroy
DebugBreak
LCMapStringA
QueryPerformanceCounter
TlsFree
InitializeCriticalSection
GetNumberFormatW
VirtualQuery
GetConsoleCP
TlsGetValue
GetDateFormatA
GetModuleFileNameA
DeleteCriticalSection
WriteFile
SetConsoleOutputCP
GetLongPathNameW
SetEnvironmentVariableA
FreeEnvironmentStringsA
GetCPInfo
SetThreadPriority
GetFileType
CompareStringW
HeapCreate
GetCurrentProcessId
HeapReAlloc
LoadLibraryW
ExitProcess
TlsAlloc
GetSystemTimeAsFileTime
WriteConsoleInputW
LoadLibraryA
HeapFree
GetUserDefaultLCID
DuplicateHandle
IsValidCodePage
GetTimeFormatA
IsBadReadPtr
GetCurrentDirectoryW
GetTimeZoneInformation
SetConsoleScreenBufferSize
CreateEventW
GetTempPathW
SetUnhandledExceptionFilter
FindResourceW
comdlg32
PrintDlgA
LoadAlterBitmap
advapi32
LookupPrivilegeNameW
CryptImportKey
RegEnumValueW
CryptDuplicateHash
RegQueryValueExA
LookupPrivilegeDisplayNameW
CryptGenRandom
LookupAccountNameW
CryptSetHashParam
Sections
.text Size: 255KB - Virtual size: 255KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 44KB - Virtual size: 74KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 144KB - Virtual size: 143KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ