Static task
static1
Behavioral task
behavioral1
Sample
864525588d73447d1b417c034554aaa15b663f14d1f7e30ca4f703ad7d7d036f.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
864525588d73447d1b417c034554aaa15b663f14d1f7e30ca4f703ad7d7d036f.exe
Resource
win10v2004-20221111-en
General
-
Target
864525588d73447d1b417c034554aaa15b663f14d1f7e30ca4f703ad7d7d036f
-
Size
666KB
-
MD5
f7f98804e8faea48c29788bb7286801a
-
SHA1
500280be6f8baaafeef97d8d45545a8d87ef1fdb
-
SHA256
864525588d73447d1b417c034554aaa15b663f14d1f7e30ca4f703ad7d7d036f
-
SHA512
70a766c12a9b50c55ddb059406dfac707aa5b337136816ab4fa6c9a18a6aa3267aea7742c02b8324913b0aeb8eb7270e54649bce2cf43d9cb208fd67135dca30
-
SSDEEP
12288:GM3Wm2x4lLffufx5XruZxODpIwmDORq619ua6s0wxi:ZWmoUC9rWIyOR9jJn
Malware Config
Signatures
Files
-
864525588d73447d1b417c034554aaa15b663f14d1f7e30ca4f703ad7d7d036f.exe windows x86
df2aa029e908b0cb9d51accabff31332
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
wininet
HttpEndRequestW
FtpFindFirstFileA
InternetDialA
CommitUrlCacheEntryW
InternetReadFileExW
FtpPutFileA
GopherGetAttributeA
GopherGetLocatorTypeW
kernel32
IsDebuggerPresent
TerminateProcess
VirtualProtectEx
GetOEMCP
lstrlenA
VirtualFree
LocalUnlock
LocalSize
OutputDebugStringW
GetTimeFormatA
GetACP
SetConsoleCtrlHandler
SetStdHandle
LocalFree
SetHandleCount
UnhandledExceptionFilter
VirtualQuery
TlsFree
GetModuleFileNameW
LoadLibraryW
TlsAlloc
InterlockedExchange
GetDateFormatA
GetLocaleInfoA
SetConsoleTitleA
FreeEnvironmentStringsW
GetConsoleCP
GetConsoleOutputCP
RaiseException
GetConsoleMode
ExitProcess
MultiByteToWideChar
GetLocaleInfoW
TlsSetValue
EnumSystemLocalesA
InitializeCriticalSection
LCMapStringA
GetEnvironmentStrings
InterlockedIncrement
SetFilePointer
IsBadReadPtr
WriteConsoleA
GetTimeZoneInformation
GetCommandLineA
lstrcpyW
FreeEnvironmentStringsA
GetCurrentProcessId
ReadFile
TlsGetValue
CompareStringW
GetProcessHeap
WideCharToMultiByte
DeleteCriticalSection
GetStartupInfoW
GetStartupInfoA
GetSystemTimeAsFileTime
HeapFree
OutputDebugStringA
LoadLibraryA
GetCPInfo
VirtualAlloc
SetConsoleOutputCP
GetCurrentThreadId
GetVersionExA
HeapDestroy
UnmapViewOfFile
GetModuleHandleA
ExpandEnvironmentStringsA
CloseHandle
GetFileType
HeapCreate
TransmitCommChar
CreateFileA
FormatMessageW
QueryPerformanceCounter
EnumResourceLanguagesA
IsValidLocale
RtlUnwind
GetTickCount
GetStringTypeA
GetStdHandle
GetProcessHeaps
CommConfigDialogW
LCMapStringW
GetModuleFileNameA
FlushFileBuffers
SetUnhandledExceptionFilter
FreeLibrary
GetLastError
CreateToolhelp32Snapshot
WriteFile
OpenMutexA
GetEnvironmentStringsW
LeaveCriticalSection
CreateMutexA
EnumTimeFormatsA
GetStringTypeW
SetLastError
HeapAlloc
EnterCriticalSection
GetCommandLineW
DebugBreak
WriteConsoleW
GetUserDefaultLCID
SetEnvironmentVariableA
GetProcAddress
HeapReAlloc
InterlockedDecrement
CompareStringA
HeapValidate
IsValidCodePage
GetCurrentThread
GetCurrentProcess
comdlg32
PageSetupDlgA
ChooseColorW
GetSaveFileNameA
user32
GetAsyncKeyState
GetMenuStringW
InternalGetWindowText
RegisterClassExA
SetWindowsHookExW
MessageBeep
SetWindowContextHelpId
EnumWindowStationsW
GetKeyboardLayout
SetShellWindow
GetDCEx
CharUpperA
GetMenu
SetUserObjectInformationA
EnumClipboardFormats
SetCursorPos
DdeConnectList
UnhookWinEvent
DdeSetUserHandle
GetTitleBarInfo
DrawMenuBar
InvalidateRgn
GetPriorityClipboardFormat
EnumThreadWindows
DdeSetQualityOfService
RegisterClassA
comctl32
InitCommonControlsEx
Sections
.text Size: 458KB - Virtual size: 458KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 85KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 108KB - Virtual size: 107KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ