Static task
static1
Behavioral task
behavioral1
Sample
ecb83455accec723f2d1c4ff36b9c54fe08766e0be02d0c0d2ac724aba6a83c5.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ecb83455accec723f2d1c4ff36b9c54fe08766e0be02d0c0d2ac724aba6a83c5.exe
Resource
win10v2004-20220812-en
General
-
Target
ecb83455accec723f2d1c4ff36b9c54fe08766e0be02d0c0d2ac724aba6a83c5
-
Size
115KB
-
MD5
11f222d48f8b50661933ea80cc1ceeb0
-
SHA1
b1b4f46f91599226d137d2a24d775451aa5f20fb
-
SHA256
ecb83455accec723f2d1c4ff36b9c54fe08766e0be02d0c0d2ac724aba6a83c5
-
SHA512
e8fa43785df2be56bb9f072f5cb71f72e83ce542db57478564deceb29ac0e39cde420ce92b38fc2a64c9fad8a7dd51013b843e906bc4cdf08e47b235c5cc094c
-
SSDEEP
3072:CyV455d6+GBgCZnWfP7DGopT1dBCTxGSUTlYud3J:TefQ+MdW7DGoB1WQS/C
Malware Config
Signatures
Files
-
ecb83455accec723f2d1c4ff36b9c54fe08766e0be02d0c0d2ac724aba6a83c5.exe windows x86
8d9f4ae8e91d6f1a4b78547ad219e4e0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
InitCommonControlsEx
wininet
InternetOpenW
InternetSetStatusCallbackW
InternetCloseHandle
HttpQueryInfoW
InternetReadFileExA
HttpSendRequestW
HttpOpenRequestW
InternetConnectW
InternetCrackUrlW
InternetSetOptionW
kernel32
LoadLibraryA
SizeofResource
LockResource
LoadResource
FindResourceW
VirtualFree
VirtualAlloc
GetSystemInfo
HeapFree
GetProcessHeap
DeleteCriticalSection
InitializeCriticalSection
RaiseException
InterlockedDecrement
InterlockedIncrement
GetLocaleInfoA
GetVersionExW
GetACP
InterlockedExchange
GetThreadLocale
CreateFileW
GetFileSize
CloseHandle
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
GetModuleFileNameW
LoadLibraryW
FreeLibrary
WideCharToMultiByte
GetTempPathW
WriteFile
SetFilePointer
HeapReAlloc
CreateEventW
GetLastError
WaitForSingleObject
CreateProcessW
GetCurrentProcess
FlushInstructionCache
HeapAlloc
GetCurrentThreadId
lstrcmpiW
lstrcpynW
MultiByteToWideChar
LoadLibraryExW
lstrlenW
lstrcpyW
GetModuleHandleW
LeaveCriticalSection
EnterCriticalSection
GetFileAttributesW
SetLastError
FindClose
GetFullPathNameW
IsBadCodePtr
FindNextFileW
DeleteFileW
CompareFileTime
IsBadReadPtr
GetTickCount
ResetEvent
SetEvent
WaitForMultipleObjects
SetThreadPriority
ReadFile
MoveFileW
SetFileTime
SetEndOfFile
TerminateThread
GetStringTypeA
SetUnhandledExceptionFilter
RtlUnwind
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetStartupInfoA
GetFileType
SetHandleCount
GetCommandLineW
GetStringTypeW
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetModuleFileNameA
GetStdHandle
LCMapStringW
LCMapStringA
VirtualQuery
VirtualProtect
UnhandledExceptionFilter
GetCPInfo
GetOEMCP
TlsGetValue
TlsSetValue
TlsFree
TlsAlloc
HeapCreate
HeapDestroy
HeapSize
TerminateProcess
GetProcAddress
ExitProcess
GetStartupInfoW
GetModuleHandleA
CreateThread
ExitThread
SetStdHandle
FlushFileBuffers
FindFirstFileW
GetVersionExA
user32
MsgWaitForMultipleObjects
IsWindowUnicode
GetMessageA
TranslateMessage
DispatchMessageW
DispatchMessageA
PostMessageW
GetMessageW
PeekMessageW
PostThreadMessageW
CharNextW
DialogBoxParamW
DestroyWindow
IsWindow
FindWindowExW
MessageBoxW
GetActiveWindow
DefWindowProcW
RegisterWindowMessageW
SetWindowLongW
SendMessageW
EndDialog
UnregisterClassW
GetWindowLongW
SetFocus
KillTimer
SetTimer
BringWindowToTop
ShowWindow
SetDlgItemTextW
GetSystemMetrics
LoadImageW
SetWindowTextW
GetWindow
SystemParametersInfoW
GetWindowRect
GetParent
GetClientRect
MapWindowPoints
SetWindowPos
GetDlgItem
advapi32
RegCloseKey
RegDeleteValueW
RegCreateKeyExW
RegSetValueExW
RegOpenKeyExW
RegQueryInfoKeyW
RegEnumKeyExW
RegDeleteKeyW
ole32
CoTaskMemFree
CoTaskMemRealloc
CoTaskMemAlloc
CoCreateInstance
oleaut32
VarUI4FromStr
Sections
.text Size: 90KB - Virtual size: 89KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE