Static task
static1
Behavioral task
behavioral1
Sample
14ebfa95d4776a0ba9d38dfe332a1bb511499ffd00b8f6fb6693cca45454e977.exe
Resource
win7-20220812-en
General
-
Target
14ebfa95d4776a0ba9d38dfe332a1bb511499ffd00b8f6fb6693cca45454e977
-
Size
271KB
-
MD5
a193368de27818c41cbcb15b5d638766
-
SHA1
5610c1ce857e7de883a73e6a5d3b958f753510e6
-
SHA256
14ebfa95d4776a0ba9d38dfe332a1bb511499ffd00b8f6fb6693cca45454e977
-
SHA512
f091e75108ec02a8643b9f095ab4fba349ab753d8b9bc759cf24d29a697d5640dac6e6cacd36b64e5a40297f3eb6f16cd577e457f56fed195450d348f0f1ffaf
-
SSDEEP
6144:Guz1VBbye0LahJDDErYvv/QFeNsp2NsJ8XypaV0:Gibye08JDDErYvk4sGoN
Malware Config
Signatures
Files
-
14ebfa95d4776a0ba9d38dfe332a1bb511499ffd00b8f6fb6693cca45454e977.exe windows x86
0c11493700f9ecbf8c1d31a0c63d00cd
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
FlushInstructionCache
GetCurrentProcess
CreateMutexW
Sleep
OpenMutexW
GetCurrentThreadId
lstrlenW
GetLastError
InterlockedIncrement
InterlockedDecrement
lstrcmpiW
SetLastError
FreeLibrary
LoadLibraryExW
GetModuleFileNameW
InterlockedCompareExchange
HeapFree
GetProcessHeap
HeapAlloc
LoadLibraryA
IsProcessorFeaturePresent
VirtualFree
VirtualAlloc
HeapDestroy
HeapReAlloc
HeapSize
CreateFileA
GetLocaleInfoW
RaiseException
GetConsoleOutputCP
WriteConsoleA
FlushFileBuffers
SetStdHandle
SetFilePointer
InitializeCriticalSectionAndSpinCount
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
GetStringTypeA
GetLocaleInfoA
GetConsoleMode
GetConsoleCP
GetModuleHandleA
IsValidCodePage
GetOEMCP
GetModuleFileNameA
LoadLibraryW
ReadProcessMemory
GlobalAlloc
GlobalFree
VirtualFreeEx
CloseHandle
OpenProcess
VirtualAllocEx
WriteProcessMemory
GetModuleHandleW
GetACP
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
HeapCreate
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetStartupInfoA
GetFileType
SetHandleCount
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetStdHandle
GetProcAddress
GetPrivateProfileStringW
GetVersionExW
MultiByteToWideChar
FreeResource
FindResourceExW
FindResourceW
LoadResource
LockResource
WriteConsoleW
SizeofResource
WriteFile
ExitProcess
GetStringTypeW
GetCPInfo
LCMapStringW
LCMapStringA
CreateThread
ExitThread
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
RtlUnwind
GetStartupInfoW
InterlockedExchange
WideCharToMultiByte
user32
IsRectEmpty
PtInRect
SetRect
EqualRect
GetWindowRect
ScreenToClient
GetDC
SendMessageW
SetTimer
SetParent
SetWindowPos
SetWindowLongW
GetWindowLongW
FindWindowExW
EnumWindows
PostQuitMessage
LoadImageW
SetCursor
UnregisterClassA
DefWindowProcW
GetActiveWindow
DialogBoxParamW
DestroyWindow
ShowWindow
GetSystemMetrics
GetCursorPos
GetWindowThreadProcessId
CharNextW
advapi32
RegQueryValueExA
RegOpenKeyExA
RegDeleteKeyW
RegDeleteValueW
RegCreateKeyExW
RegOpenKeyExW
RegSetValueExW
RegQueryInfoKeyW
RegEnumKeyExW
RegCloseKey
ole32
CoUninitialize
CoTaskMemFree
CoCreateInstance
CoTaskMemRealloc
CoTaskMemAlloc
CreateStreamOnHGlobal
CoInitialize
shell32
ShellExecuteW
SHGetMalloc
SHGetSpecialFolderLocation
SHGetPathFromIDListW
oleaut32
VarUI4FromStr
shlwapi
PathFileExistsW
StrStrW
comctl32
InitCommonControlsEx
_TrackMouseEvent
gdi32
CreateCompatibleDC
SelectObject
SetViewportOrgEx
CreateCompatibleBitmap
DeleteObject
DeleteDC
BitBlt
gdiplus
GdipGetImageWidth
GdiplusStartup
GdiplusShutdown
GdipCloneImage
GdipDrawImageRectI
GdipReleaseDC
GdipCreateFromHDC
GdipFree
GdipAlloc
GdipDeleteGraphics
GdipDisposeImage
GdipGetImageHeight
GdipCreateBitmapFromStream
GdipCreateBitmapFromStreamICM
wininet
HttpAddRequestHeadersW
HttpSendRequestW
HttpQueryInfoW
InternetReadFile
InternetAttemptConnect
InternetCloseHandle
InternetOpenW
InternetCrackUrlW
InternetConnectW
HttpOpenRequestW
Sections
.text Size: 114KB - Virtual size: 114KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 7KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 117KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE