Static task
static1
Behavioral task
behavioral1
Sample
c8628db974d5c0c0e6d05d5e5c3fd8597d3e2806bef3e4a5998fefab0950d3f7.exe
Resource
win7-20221111-en
General
-
Target
c8628db974d5c0c0e6d05d5e5c3fd8597d3e2806bef3e4a5998fefab0950d3f7
-
Size
178KB
-
MD5
309547bbe65f734f84e56cf195172f30
-
SHA1
e95ede4528c8cd5e830750e3d8a530703bdfe37c
-
SHA256
c8628db974d5c0c0e6d05d5e5c3fd8597d3e2806bef3e4a5998fefab0950d3f7
-
SHA512
9cd9a4a4ae41ff116568ebf811998ed9b4245b0c175c8496230565ce7dcd906ca4dba22b5a8c1bf3d4bf84f92a2d0d56639335ba1385f0f8a41af929a42ea683
-
SSDEEP
3072:PbeNNN2SHvMHfYn/1AkDfZpuCaviKxTBfKDATS4jTryUvNlutMxbmB7tap+IA:jecEvMHw2CfZpul6KxTByDATSsryuutT
Malware Config
Signatures
Files
-
c8628db974d5c0c0e6d05d5e5c3fd8597d3e2806bef3e4a5998fefab0950d3f7.exe windows x86
9da73315d73579356ea5c6ef83321491
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WideCharToMultiByte
IsProcessorFeaturePresent
EncodePointer
OutputDebugStringW
SetEvent
TlsSetValue
TlsGetValue
CreateEventW
GetNativeSystemInfo
GetVersionExW
Sleep
IsDebuggerPresent
WritePrivateProfileStringW
GetCurrentThreadId
GetSystemTimeAsFileTime
QueryPerformanceFrequency
QueryPerformanceCounter
LeaveCriticalSection
EnterCriticalSection
GetWindowsDirectoryW
GetSystemDirectoryW
GetModuleFileNameW
GetTickCount
GetCurrentProcessId
CreateMutexW
WaitForSingleObject
ReleaseMutex
OutputDebugStringA
SetFilePointer
GetCurrentProcess
SetLastError
GetTempPathW
WriteFile
RemoveDirectoryW
ReadFile
GetFileSize
DecodePointer
DeleteFileW
CreateFileW
GetModuleHandleW
GetFileAttributesExW
GetFileAttributesW
CreateDirectoryW
GetCurrentDirectoryW
CloseHandle
GetProcAddress
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
GetLastError
msvcp120
?_Xbad_alloc@std@@YAXXZ
?_Xout_of_range@std@@YAXPBD@Z
?_Swap_all@_Container_base0@std@@QAEXAAU12@@Z
?_Xbad_function_call@std@@YAXXZ
?_Orphan_all@_Container_base0@std@@QAEXXZ
?_Syserror_map@std@@YAPBDH@Z
?_Winerror_map@std@@YAPBDH@Z
?good@ios_base@std@@QBE_NXZ
?flags@ios_base@std@@QBEHXZ
?width@ios_base@std@@QBE_JXZ
?width@ios_base@std@@QAE_J_J@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXH@Z
?pbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXH@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?_BADOFF@std@@3_JB
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@K@Z
??0_Container_base12@std@@QAE@XZ
??1_Container_base12@std@@QAE@XZ
?_Orphan_all@_Container_base12@std@@QAEXXZ
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_K@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@D@Z
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
??0_Lockit@std@@QAE@H@Z
??1_Lockit@std@@QAE@XZ
??Bid@locale@std@@QAEIXZ
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@PBD_J@Z
?id@?$ctype@_W@std@@2V0locale@2@A
?_Init@locale@std@@CAPAV_Locimp@12@_N@Z
?_Getcat@?$ctype@_W@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?is@?$ctype@_W@std@@QBE_NF_W@Z
?_Xlength_error@std@@YAXPBD@Z
shlwapi
PathFileExistsW
wininet
InternetSetStatusCallbackW
HttpSendRequestW
InternetConnectW
InternetReadFile
InternetCrackUrlW
InternetOpenW
HttpQueryInfoW
HttpOpenRequestW
InternetGetConnectedState
InternetCloseHandle
msvcr120
__crtSetUnhandledExceptionFilter
_invoke_watson
_controlfp_s
_purecall
?terminate@@YAXXZ
atoi
__wargv
__argc
ftell
fseek
_wfopen_s
memmove
??2@YAPAXI@Z
_wcsicmp
??_V@YAXPAX@Z
memcpy_s
free
??3@YAXPAX@Z
__crtTerminateProcess
__crtUnhandledException
_crt_debugger_hook
_except_handler4_common
_commode
_fmode
_wcmdln
_initterm
_initterm_e
__setusermatherr
_configthreadlocale
_cexit
exit
__set_app_type
__wgetmainargs
_amsg_exit
__crtGetShowWindowMode
_XcptFilter
_onexit
__dllonexit
_calloc_crt
_unlock
_lock
??1type_info@@UAE@XZ
??0exception@std@@QAE@ABV01@@Z
??0bad_cast@std@@QAE@ABV01@@Z
??0bad_cast@std@@QAE@PBD@Z
??1bad_cast@std@@UAE@XZ
_vsnwprintf
fopen
malloc
_exit
memcpy
fread
ferror
fclose
tolower
realloc
_time64
_localtime64_s
fwrite
fflush
__iob_func
_vscwprintf_p
_vswprintf_p
_vscprintf_p
_vsprintf_p
memset
_wfullpath
fread_s
_CxxThrowException
__CxxFrameHandler3
winmm
timeGetTime
shell32
SHGetFolderPathW
SHFileOperationW
Sections
.text Size: 74KB - Virtual size: 73KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 2B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 69KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE