Static task
static1
Behavioral task
behavioral1
Sample
9ec1d672935526931c8021794b73f4674a8bda90cda330043201e7d7d95c5377.exe
Resource
win7-20220901-en
General
-
Target
9ec1d672935526931c8021794b73f4674a8bda90cda330043201e7d7d95c5377
-
Size
566KB
-
MD5
429cffa7989010dc16879c6e2bf09f20
-
SHA1
0ae8ed99475cd90a066a244d2105519381b8b775
-
SHA256
9ec1d672935526931c8021794b73f4674a8bda90cda330043201e7d7d95c5377
-
SHA512
72c9af38d8842f8c1bfe102a3a9ff2a30a1356016c3b1c3a67fb79ae594b75a3699648c58ce6ac63490173a65079124f3e012945282ccb4121f5cc26a70aad29
-
SSDEEP
12288:RCAxda37j1rD5pTzeGWOEnxZb8wXt3cQs2f1DOa:RCzd7TvExZb861ndR
Malware Config
Signatures
Files
-
9ec1d672935526931c8021794b73f4674a8bda90cda330043201e7d7d95c5377.exe windows x86
02308ca238a7350b6f1006ebb50f83a0
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
version
GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA
urlmon
URLDownloadToCacheFileA
wininet
InternetCrackUrlA
InternetOpenA
InternetCloseHandle
InternetConnectA
InternetReadFile
InternetSetOptionA
HttpOpenRequestA
HttpSendRequestA
HttpQueryInfoA
kernel32
GetTempPathA
WideCharToMultiByte
GetProcAddress
GetModuleHandleA
HeapAlloc
HeapFree
GetProcessHeap
GetCurrentProcessId
GetFileSize
GetFileSizeEx
WriteFile
ReadFile
FlushFileBuffers
SetEndOfFile
SetFilePointer
FindClose
GetSystemTimeAsFileTime
CreateDirectoryA
CreateFileA
FindFirstFileA
LocalFree
GetCurrentProcess
MultiByteToWideChar
GetVersion
InterlockedIncrement
InterlockedDecrement
GlobalAlloc
GlobalLock
GlobalUnlock
FlushInstructionCache
RaiseException
GetCurrentThreadId
SetLastError
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
MulDiv
lstrcmpA
OpenMutexA
FreeLibrary
GetEnvironmentStringsW
LoadLibraryExA
FindResourceA
FindResourceExW
lstrlenA
GetModuleHandleW
GetStartupInfoW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCPInfo
GetCommandLineA
LoadLibraryExW
VirtualQuery
VirtualProtect
GetSystemInfo
AreFileApisANSI
IsDebuggerPresent
RtlUnwind
GetStringTypeW
EncodePointer
DecodePointer
VirtualFree
VirtualAlloc
IsProcessorFeaturePresent
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
InterlockedCompareExchange
HeapSize
HeapReAlloc
GetConsoleCP
HeapDestroy
FindResourceW
GetModuleFileNameA
GetConsoleMode
MoveFileExW
GetFileType
GetModuleHandleExW
ExitProcess
GetModuleFileNameW
GetStdHandle
FreeEnvironmentStringsW
OutputDebugStringW
LoadLibraryW
SetFilePointerEx
SetStdHandle
CreateMutexA
GetTickCount
CloseHandle
SizeofResource
LoadResource
Sleep
GetLastError
LockResource
IsDBCSLeadByte
QueryPerformanceCounter
WriteConsoleW
CreateFileW
ReadConsoleW
GetOEMCP
LCMapStringW
GetACP
IsValidCodePage
lstrcmpiA
user32
LoadCursorA
GetWindow
GetClassNameA
GetParent
GetDesktopWindow
SetWindowLongA
GetWindowLongA
GetSysColor
ScreenToClient
ClientToScreen
GetClientRect
GetWindowTextLengthA
GetWindowTextA
SetWindowTextA
RedrawWindow
InvalidateRgn
InvalidateRect
EndPaint
BeginPaint
ReleaseDC
GetDC
DestroyAcceleratorTable
CreateAcceleratorTableA
ReleaseCapture
SetCapture
GetFocus
SetFocus
CharNextA
GetDlgItem
SetWindowPos
MoveWindow
DestroyWindow
IsChild
IsWindow
CreateWindowExA
GetClassInfoExA
RegisterClassExA
CallWindowProcA
DefWindowProcA
SendMessageA
RegisterWindowMessageA
PostMessageA
UnregisterClassA
FillRect
gdi32
GetStockObject
GetDeviceCaps
DeleteObject
SelectObject
CreateSolidBrush
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt
DeleteDC
GetObjectA
advapi32
RegEnumKeyExA
RegDeleteKeyA
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegEnumValueA
RegCreateKeyExA
RegCloseKey
RegDeleteValueA
RegQueryInfoKeyW
shell32
SHGetFolderPathA
ShellExecuteExA
ole32
CoUninitialize
CoInitialize
CoCreateInstance
CoTaskMemFree
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
StringFromGUID2
CoTaskMemAlloc
OleInitialize
OleUninitialize
OleLockRunning
CoCreateGuid
CoTaskMemRealloc
CreateStreamOnHGlobal
oleaut32
SysStringLen
VariantInit
VariantClear
LoadTypeLi
LoadRegTypeLi
SysFreeString
VarUI4FromStr
SysAllocStringLen
OleCreateFontIndirect
SysAllocString
shlwapi
UrlEscapeA
comctl32
InitCommonControlsEx
Sections
.text Size: 266KB - Virtual size: 266KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 29KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
gwykwgp Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 187KB - Virtual size: 188KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE