Static task
static1
Behavioral task
behavioral1
Sample
140badb86a1c9e143a5f7208e77b35cfc28a9f53099bba9da89376970f9373b7.exe
Resource
win7-20220812-en
General
-
Target
140badb86a1c9e143a5f7208e77b35cfc28a9f53099bba9da89376970f9373b7
-
Size
421KB
-
MD5
078a8ca08a20e940674269d602922511
-
SHA1
fa2e749c0c6f2824aa4146e6fc81394b017d165d
-
SHA256
140badb86a1c9e143a5f7208e77b35cfc28a9f53099bba9da89376970f9373b7
-
SHA512
1e2967de60fe4dd0e612d53f955fc7077bae435e3e46566de312df9ffd88e6d508e6804d59905e4210c91bbf783e4f5b43fe3c9d7c904f9cdfb958a55511b51c
-
SSDEEP
6144:wxsdgZ1DcN4GrZXeZj0vYp8ieRZw+3r5lpTBM73HZY5vYIFOOxD:gs21DcioZXeZj0vYeRZwWpTmUQIoON
Malware Config
Signatures
Files
-
140badb86a1c9e143a5f7208e77b35cfc28a9f53099bba9da89376970f9373b7.exe windows x86
b80674a27329e889cbf8f2df4b5b3565
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
version
GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA
urlmon
URLDownloadToCacheFileA
wininet
InternetOpenA
InternetCloseHandle
InternetConnectA
InternetReadFile
HttpOpenRequestA
HttpSendRequestA
HttpQueryInfoA
InternetCrackUrlA
kernel32
FindResourceExW
WideCharToMultiByte
GetProcAddress
GetModuleHandleA
GetFileSize
GetFileSizeEx
WriteFile
ReadFile
FlushFileBuffers
SetEndOfFile
SetFilePointer
GetSystemTimeAsFileTime
CreateFileA
LocalFree
GetCurrentProcess
MultiByteToWideChar
GetVersion
InterlockedIncrement
InterlockedDecrement
GlobalAlloc
GlobalLock
GlobalUnlock
FlushInstructionCache
RaiseException
SetLastError
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
WaitForSingleObject
MulDiv
lstrcmpA
GetModuleFileNameA
ReleaseMutex
OpenMutexA
FreeLibrary
lstrcmpiA
LoadLibraryExA
FindResourceA
GetTempPathA
IsDBCSLeadByte
FindResourceW
LCMapStringW
GetModuleHandleW
GetStartupInfoW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCPInfo
GetCommandLineA
IsDebuggerPresent
LoadLibraryExW
VirtualQuery
VirtualProtect
GetSystemInfo
AreFileApisANSI
RtlUnwind
GetLocalTime
GetStringTypeW
EncodePointer
DecodePointer
VirtualFree
VirtualAlloc
IsProcessorFeaturePresent
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
InterlockedCompareExchange
GetProcessHeap
HeapSize
HeapFree
HeapReAlloc
HeapAlloc
HeapDestroy
OutputDebugStringA
CreateMutexA
IsValidCodePage
GetACP
GetOEMCP
GetConsoleCP
GetConsoleMode
GetFileType
SetFilePointerEx
CloseHandle
SizeofResource
LoadResource
Sleep
GetLastError
GetCurrentThreadId
GetCurrentProcessId
LockResource
QueryPerformanceCounter
FreeEnvironmentStringsW
GetEnvironmentStringsW
OutputDebugStringW
LoadLibraryW
SetStdHandle
WriteConsoleW
ReadConsoleW
CreateFileW
GetModuleHandleExW
ExitProcess
GetModuleFileNameW
GetStdHandle
user32
LoadCursorA
GetWindow
GetClassNameA
GetParent
GetDesktopWindow
GetWindowLongA
FillRect
GetSysColor
ScreenToClient
ClientToScreen
GetClientRect
GetWindowTextLengthA
GetWindowTextA
SetWindowTextA
RedrawWindow
InvalidateRgn
InvalidateRect
EndPaint
BeginPaint
ReleaseDC
GetDC
DestroyAcceleratorTable
CreateAcceleratorTableA
ReleaseCapture
SetCapture
GetFocus
SetFocus
CharNextA
GetDlgItem
SetWindowPos
MoveWindow
DestroyWindow
IsChild
IsWindow
CreateWindowExA
GetClassInfoExA
RegisterClassExA
CallWindowProcA
DefWindowProcA
SendMessageA
RegisterWindowMessageA
PostMessageA
UnregisterClassA
SetWindowLongA
gdi32
GetStockObject
GetDeviceCaps
DeleteObject
SelectObject
CreateSolidBrush
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt
DeleteDC
GetObjectA
advapi32
RegDeleteValueA
RegEnumKeyExA
RegDeleteKeyA
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegEnumValueA
RegCreateKeyExA
RegCloseKey
RegQueryInfoKeyW
shell32
ShellExecuteExA
ole32
CoGetClassObject
CLSIDFromString
CoCreateInstance
CoInitialize
CLSIDFromProgID
StringFromGUID2
CoTaskMemAlloc
OleInitialize
OleUninitialize
OleLockRunning
CreateStreamOnHGlobal
CoUninitialize
CoTaskMemRealloc
CoTaskMemFree
oleaut32
SysStringLen
VariantInit
VariantClear
LoadTypeLi
LoadRegTypeLi
SysAllocString
VarUI4FromStr
SysAllocStringLen
OleCreateFontIndirect
SysFreeString
shlwapi
UrlEscapeA
comctl32
InitCommonControlsEx
Sections
.text Size: 259KB - Virtual size: 259KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 73KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 9KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 78KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE