Static task
static1
Behavioral task
behavioral1
Sample
1cb076221c8d20fd652ac39dac69e520a28fe99164cee519401eec99334bee7e.exe
Resource
win7-20220901-en
General
-
Target
1cb076221c8d20fd652ac39dac69e520a28fe99164cee519401eec99334bee7e
-
Size
459KB
-
MD5
a18a6ec38c7032c9a34aca55f34e44e0
-
SHA1
68390230771d324344461481228b80d3699ff0be
-
SHA256
1cb076221c8d20fd652ac39dac69e520a28fe99164cee519401eec99334bee7e
-
SHA512
cd991bc1a6a33bf5aaae1ec3c5a5e6c51409f03e3b20f5d27c9eba5bffb6f78d2c67ac90cb8832d846a63373ea296436734e074d5d9fbd32ece9340baec0e179
-
SSDEEP
12288:tmGVLwm/3sXWfBHlmW09nVpdifqXjwH54Oud:t/OmnbBinVp4Nw
Malware Config
Signatures
Files
-
1cb076221c8d20fd652ac39dac69e520a28fe99164cee519401eec99334bee7e.exe windows x86
be62700368107f1121b6fbde0d15fee8
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
wininet
InternetCanonicalizeUrlW
InternetAttemptConnect
HttpAddRequestHeadersW
HttpEndRequestW
HttpOpenRequestW
HttpQueryInfoW
InternetQueryOptionW
HttpSendRequestW
HttpSendRequestExA
InternetCloseHandle
InternetConnectW
InternetOpenW
InternetReadFile
InternetReadFileExA
InternetSetOptionW
InternetSetStatusCallbackW
InternetWriteFile
InternetTimeFromSystemTimeW
InternetTimeToSystemTimeW
InternetCombineUrlW
InternetGetCookieW
InternetSetFilePointer
InternetSetCookieW
ws2_32
closesocket
WSACleanup
WSAStartup
WSAIoctl
socket
sensapi
IsNetworkAlive
kernel32
FileTimeToSystemTime
FileTimeToLocalFileTime
GetFileAttributesW
GetFileSizeEx
GetFileTime
lstrcmpA
lstrlenA
lstrcmpW
GlobalFlags
GlobalAddAtomW
GetCurrentThreadId
InterlockedExchange
CompareStringA
GlobalDeleteAtom
GetVersionExA
LoadLibraryA
GetFullPathNameW
GlobalFindAtomW
GetModuleHandleA
RtlUnwind
ExitThread
CreateThread
GetSystemTimeAsFileTime
CreateDirectoryW
RaiseException
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
WriteConsoleW
GetFileType
GetStdHandle
GetStartupInfoW
HeapAlloc
HeapFree
SetStdHandle
HeapReAlloc
HeapSize
Sleep
ExitProcess
GetConsoleCP
GetConsoleMode
GetModuleFileNameA
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
SetHandleCount
GetStartupInfoA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
VirtualAlloc
InitializeCriticalSectionAndSpinCount
GetTimeZoneInformation
WriteConsoleA
GetConsoleOutputCP
GetLocaleInfoA
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
CreateFileA
GetProcessHeap
SetEnvironmentVariableA
GetVolumeInformationW
FindFirstFileW
FindClose
GetCurrentProcess
DuplicateHandle
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
GetCurrentProcessId
CompareStringW
InterlockedDecrement
InterlockedIncrement
MultiByteToWideChar
SetLastError
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageW
LocalFree
FindResourceW
LoadResource
LockResource
SizeofResource
SetEvent
CreateEventW
OutputDebugStringA
OutputDebugStringW
FreeLibrary
LoadLibraryExW
SetFileAttributesW
WideCharToMultiByte
LoadLibraryW
GetProcAddress
lstrlenW
GetPrivateProfileIntW
CopyFileW
WritePrivateProfileStringW
GetSystemTime
CreateFileW
GetFileSize
WaitForSingleObject
CloseHandle
GetModuleHandleW
GetModuleFileNameW
CreateMutexW
GetLastError
GetPrivateProfileStringW
DeleteFileW
user32
TabbedTextOutW
DrawTextW
DrawTextExW
GrayStringW
DestroyMenu
SetMenu
GetClientRect
GetClassInfoExW
GetClassInfoW
RegisterClassW
AdjustWindowRectEx
CallWindowProcW
CopyRect
GetMenu
SystemParametersInfoA
GetWindowPlacement
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
ModifyMenuW
EnableMenuItem
CheckMenuItem
SetForegroundWindow
IsIconic
PostMessageW
SetWindowPos
SetWindowLongW
IsWindow
GetDlgItem
SetWindowsHookExW
CallNextHookEx
GetKeyState
PeekMessageW
ValidateRect
GetFocus
ClientToScreen
GetWindow
GetDlgCtrlID
GetWindowRect
GetClassNameW
PtInRect
SetWindowTextW
GetWindowTextW
CharUpperW
GetWindowThreadProcessId
GetParent
GetWindowLongW
GetLastActivePopup
IsWindowEnabled
EnableWindow
MessageBoxW
UnhookWindowsHookEx
GetSystemMetrics
GetDC
ReleaseDC
GetSysColor
GetSysColorBrush
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
wsprintfW
CharLowerBuffW
DefWindowProcW
BeginPaint
EndPaint
PostQuitMessage
DestroyWindow
CreateWindowExW
UpdateWindow
LoadIconW
LoadCursorW
RegisterClassExW
FindWindowW
RegisterWindowMessageW
WinHelpW
GetCapture
GetClassLongW
SetPropW
GetPropW
RemovePropW
GetForegroundWindow
GetTopWindow
GetMessageTime
GetMessagePos
SendMessageW
LoadAcceleratorsW
GetMessageW
TranslateAcceleratorW
TranslateMessage
DispatchMessageW
MapWindowPoints
gdi32
SetMapMode
Escape
SelectObject
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
TextOutW
GetStockObject
RectVisible
PtVisible
RestoreDC
SaveDC
SetBkColor
SetTextColor
GetClipBox
CreateBitmap
DeleteObject
DeleteDC
GetDeviceCaps
ExtTextOutW
comdlg32
GetFileTitleW
winspool.drv
ClosePrinter
OpenPrinterW
DocumentPropertiesW
advapi32
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
shell32
SHGetSpecialFolderPathW
ShellExecuteW
shlwapi
PathStripToRootW
PathIsUNCW
PathFileExistsW
PathFindFileNameW
StrToIntW
ole32
CoUninitialize
CoInitialize
oleaut32
SysFreeString
VarBstrCat
SysStringLen
SysStringByteLen
SysAllocStringByteLen
SysAllocString
SysAllocStringLen
VariantClear
VariantChangeType
VariantInit
Sections
.text Size: 229KB - Virtual size: 229KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 48KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 8KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 167KB - Virtual size: 168KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE