Static task
static1
Behavioral task
behavioral1
Sample
4a1fb995a7af4898b9f498ffd11270d2b040c8c052b461a7ba4aa7ac90a3ca55.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
4a1fb995a7af4898b9f498ffd11270d2b040c8c052b461a7ba4aa7ac90a3ca55.exe
Resource
win10v2004-20220812-en
General
-
Target
4a1fb995a7af4898b9f498ffd11270d2b040c8c052b461a7ba4aa7ac90a3ca55
-
Size
422KB
-
MD5
84a032b719c7ce454932804898234b2c
-
SHA1
1402781203a6b5522d8b6e4a1c376299c2bbb576
-
SHA256
4a1fb995a7af4898b9f498ffd11270d2b040c8c052b461a7ba4aa7ac90a3ca55
-
SHA512
0b14f0f52b99d16a4e382245dcae4ae234cf02d2354e8830bf202a819defd6291d0b7c3abd6a371868fb97923ffa545bc760e14cd476e34f0bf19274dea3b91d
-
SSDEEP
12288:KqYt4Crq4fUmaJFZslrU8G2k7DpTMlkHtS7:KqY2CrqC/pU8MxTRHtE
Malware Config
Signatures
Files
-
4a1fb995a7af4898b9f498ffd11270d2b040c8c052b461a7ba4aa7ac90a3ca55.exe windows x86
48e9bf1a67352ab4a91214e92b92544e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
version
GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA
urlmon
URLDownloadToCacheFileA
wininet
InternetCrackUrlA
InternetOpenA
InternetCloseHandle
InternetConnectA
InternetReadFile
InternetSetOptionA
HttpOpenRequestA
HttpSendRequestA
HttpQueryInfoA
kernel32
FindResourceW
FindResourceExW
GetTempPathA
WideCharToMultiByte
GetProcAddress
GetModuleHandleA
HeapAlloc
HeapFree
GetProcessHeap
GetFileSize
GetFileSizeEx
WriteFile
ReadFile
FlushFileBuffers
SetEndOfFile
SetFilePointer
FindClose
GetSystemTimeAsFileTime
GetTickCount
CreateDirectoryA
CreateFileA
FindFirstFileA
LocalFree
GetCurrentProcess
MultiByteToWideChar
GetVersion
InterlockedIncrement
InterlockedDecrement
GlobalAlloc
GlobalLock
GlobalUnlock
FlushInstructionCache
RaiseException
SetLastError
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
WaitForSingleObject
MulDiv
lstrcmpA
ReleaseMutex
OpenMutexA
FreeLibrary
GetEnvironmentStringsW
LoadLibraryExA
FindResourceA
OutputDebugStringA
lstrlenA
FindNextFileA
GetModuleHandleW
GetStartupInfoW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCPInfo
GetCommandLineA
LoadLibraryExW
VirtualQuery
VirtualProtect
GetSystemInfo
AreFileApisANSI
IsDebuggerPresent
RtlUnwind
GetLocalTime
GetStringTypeW
EncodePointer
DecodePointer
VirtualFree
VirtualAlloc
IsProcessorFeaturePresent
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
InterlockedCompareExchange
HeapSize
HeapReAlloc
HeapDestroy
GetModuleFileNameA
CreateMutexA
GetConsoleCP
GetConsoleMode
MoveFileExW
GetFileType
ExitProcess
GetModuleFileNameW
GetStdHandle
FreeEnvironmentStringsW
OutputDebugStringW
LoadLibraryW
SetFilePointerEx
CloseHandle
SizeofResource
LoadResource
Sleep
GetLastError
GetCurrentThreadId
GetCurrentProcessId
LockResource
IsDBCSLeadByte
QueryPerformanceCounter
SetStdHandle
WriteConsoleW
CreateFileW
ReadConsoleW
GetOEMCP
GetACP
LCMapStringW
IsValidCodePage
lstrcmpiA
GetModuleHandleExW
user32
LoadCursorA
GetWindow
GetClassNameA
GetParent
GetDesktopWindow
SetWindowLongA
GetWindowLongA
FillRect
ScreenToClient
ClientToScreen
GetClientRect
GetWindowTextLengthA
GetWindowTextA
SetWindowTextA
RedrawWindow
InvalidateRgn
InvalidateRect
EndPaint
BeginPaint
ReleaseDC
GetDC
DestroyAcceleratorTable
CreateAcceleratorTableA
ReleaseCapture
SetCapture
GetFocus
SetFocus
CharNextA
GetDlgItem
SetWindowPos
MoveWindow
DestroyWindow
IsChild
IsWindow
CreateWindowExA
GetClassInfoExA
RegisterClassExA
CallWindowProcA
DefWindowProcA
SendMessageA
RegisterWindowMessageA
PostMessageA
UnregisterClassA
GetSysColor
gdi32
GetStockObject
GetDeviceCaps
DeleteObject
SelectObject
CreateSolidBrush
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt
DeleteDC
GetObjectA
advapi32
RegEnumKeyExA
RegDeleteKeyA
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegEnumValueA
RegCreateKeyExA
RegCloseKey
RegDeleteValueA
RegQueryInfoKeyW
shell32
SHGetFolderPathA
ShellExecuteExA
ole32
CoUninitialize
CoInitialize
CoCreateInstance
CoTaskMemFree
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
StringFromGUID2
CoTaskMemAlloc
OleInitialize
OleUninitialize
OleLockRunning
CoCreateGuid
CoTaskMemRealloc
CreateStreamOnHGlobal
oleaut32
SysStringLen
VariantInit
VariantClear
LoadTypeLi
LoadRegTypeLi
SysFreeString
VarUI4FromStr
SysAllocStringLen
OleCreateFontIndirect
SysAllocString
shlwapi
UrlEscapeA
comctl32
InitCommonControlsEx
Sections
.text Size: 306KB - Virtual size: 305KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 83KB - Virtual size: 83KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rrdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE