Static task
static1
Behavioral task
behavioral1
Sample
3db832235eb85afb4f9544c6bfaabff9f88c616067ff9f62630b9982df519893.exe
Resource
win7-20220812-en
General
-
Target
3db832235eb85afb4f9544c6bfaabff9f88c616067ff9f62630b9982df519893
-
Size
1.1MB
-
MD5
05df8051e470fe84a994c5286e83d610
-
SHA1
16d718465064054f6385128467dece046c6bab17
-
SHA256
3db832235eb85afb4f9544c6bfaabff9f88c616067ff9f62630b9982df519893
-
SHA512
499aa4e27b37516d9e57bf2eb6df27f2d07b993c8e1ee2a9a2f65248722e3c6ef93c6fe1b2068d3f514de38cb4217635135b521f7f9824d6b6d1a1df10fb03a6
-
SSDEEP
24576:gMiFFCLDNtxg+Dnkzjkm2PvTRVApSga41aTJsa:niHAFzDMjCLApSRTTWa
Malware Config
Signatures
Files
-
3db832235eb85afb4f9544c6bfaabff9f88c616067ff9f62630b9982df519893.exe windows x86
087ac20d8e13d386dc5588c0250fc6f9
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
version
VerQueryValueW
wininet
InternetSetOptionW
HttpOpenRequestW
InternetCloseHandle
kernel32
SetLastError
GetModuleHandleA
EnterCriticalSection
LeaveCriticalSection
GetFileSize
GetFileSizeEx
WriteFile
ReadFile
FlushFileBuffers
SetEndOfFile
SetFilePointer
FindClose
GetSystemTimeAsFileTime
GetFileAttributesW
FindFirstFileW
LocalAlloc
LocalFree
GetCurrentProcess
InitializeCriticalSection
DeleteCriticalSection
LoadLibraryA
FreeLibrary
TerminateProcess
GetVersion
InterlockedIncrement
InterlockedDecrement
GlobalAlloc
GlobalLock
GlobalUnlock
FlushInstructionCache
RaiseException
GetCurrentThreadId
InitializeCriticalSectionAndSpinCount
MulDiv
lstrcmpW
CreateMutexW
OpenMutexW
CreateThread
LoadLibraryW
lstrcmpiW
LoadLibraryExW
GetStdHandle
QueryPerformanceCounter
GlobalMemoryStatus
FlushConsoleInputBuffer
GetStartupInfoW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCPInfo
SetConsoleMode
ReadConsoleInputA
GetConsoleMode
SetConsoleCtrlHandler
AreFileApisANSI
GetModuleHandleExW
ExitProcess
GetCommandLineW
IsDebuggerPresent
RtlUnwind
GetStringTypeW
EncodePointer
DecodePointer
VirtualFree
VirtualAlloc
IsProcessorFeaturePresent
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
InterlockedCompareExchange
GetConsoleCP
HeapSize
HeapReAlloc
HeapDestroy
GetCurrentProcessId
GetProcessHeap
GetOEMCP
GetMailslotInfo
PeekNamedPipe
GetTickCount
GetTimeZoneInformation
CloseHandle
GetFileType
SizeofResource
LoadResource
Sleep
GetLastError
GetProcAddress
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
IsValidCodePage
GetACP
HeapFree
HeapAlloc
FindNextFileW
CreateFileW
OpenThread
WideCharToMultiByte
MultiByteToWideChar
GetDiskFreeSpaceW
GetTempPathW
FindResourceExW
FindResourceW
GetModuleHandleW
GetVersionExA
GetModuleFileNameW
LockResource
OutputDebugStringW
WriteConsoleW
SetEnvironmentVariableA
SetFilePointerEx
SetStdHandle
ReadConsoleW
FreeEnvironmentStringsW
WaitForMultipleObjects
GetEnvironmentStringsW
user32
GetUserObjectInformationW
FindWindowExW
GetProcessWindowStation
LoadCursorW
GetWindow
GetClassNameW
GetParent
GetDesktopWindow
SetWindowLongW
GetWindowLongW
FillRect
GetSysColor
ScreenToClient
MessageBoxA
ClientToScreen
GetClientRect
GetWindowTextW
SetWindowTextW
RedrawWindow
InvalidateRgn
InvalidateRect
EndPaint
BeginPaint
ReleaseDC
GetDC
DestroyAcceleratorTable
CreateAcceleratorTableW
ReleaseCapture
SetCapture
GetFocus
SetFocus
CharNextW
GetDlgItem
SetWindowPos
MoveWindow
DestroyWindow
IsChild
IsWindow
CreateWindowExW
GetClassInfoExW
RegisterClassExW
CallWindowProcW
DefWindowProcW
SendMessageW
RegisterWindowMessageW
PostMessageW
UnregisterClassW
GetWindowTextLengthW
gdi32
GetObjectW
SelectObject
GetStockObject
GetDeviceCaps
DeleteDC
CreateSolidBrush
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt
DeleteObject
advapi32
RegSetValueExW
RegQueryValueExW
RegOpenKeyExW
RegEnumValueW
RegEnumKeyExW
RegDeleteKeyW
RegCreateKeyExW
RegCloseKey
GetSidSubAuthority
GetSidSubAuthorityCount
RegDeleteValueW
RegQueryInfoKeyW
DeregisterEventSource
ReportEventA
RegisterEventSourceA
GetTokenInformation
ole32
CoTaskMemAlloc
StringFromGUID2
CLSIDFromProgID
CLSIDFromString
OleInitialize
CoTaskMemFree
CoCreateInstance
CoUninitialize
CoInitialize
OleUninitialize
OleLockRunning
CreateStreamOnHGlobal
CoTaskMemRealloc
CoGetClassObject
oleaut32
SysStringLen
VariantInit
VariantClear
LoadTypeLi
LoadRegTypeLi
SysFreeString
VarUI4FromStr
SysAllocStringLen
OleCreateFontIndirect
SysAllocString
comctl32
InitCommonControlsEx
Sections
.text Size: 789KB - Virtual size: 788KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 255KB - Virtual size: 255KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 25KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rmnet Size: 54KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE