Static task
static1
Behavioral task
behavioral1
Sample
a9e1c111ed2845dbaf17edb7e494f884db41967d9665f637f3f49b828352bdb0.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a9e1c111ed2845dbaf17edb7e494f884db41967d9665f637f3f49b828352bdb0.exe
Resource
win10v2004-20221111-en
General
-
Target
a9e1c111ed2845dbaf17edb7e494f884db41967d9665f637f3f49b828352bdb0
-
Size
260KB
-
MD5
37de6e19502863f32ea2fad1d0082ba0
-
SHA1
159866c4146fa7146ef69ff9264af702f7b3de87
-
SHA256
a9e1c111ed2845dbaf17edb7e494f884db41967d9665f637f3f49b828352bdb0
-
SHA512
8a669feb1ab96e6331857fe8d4371bf4faa943b5a21162517ed7e5c9ebb25c6c0476cd13273938fa6250811595f3936a2d0df7b1e605160efb57b2d61a2aa3d1
-
SSDEEP
6144:OUnVqLESVjHgrv2ug7ALOFF5UDMVaKvPAK7UIwW:ODjHXug7ArwPAd6
Malware Config
Signatures
Files
-
a9e1c111ed2845dbaf17edb7e494f884db41967d9665f637f3f49b828352bdb0.exe windows x86
98ee21ce37c8c60d4da62ccaf6f9ea68
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
urlmon
URLDownloadToFileA
kernel32
GetCPInfo
GetOEMCP
GetFileAttributesA
GetFileTime
SetErrorMode
HeapFree
VirtualAlloc
HeapAlloc
HeapReAlloc
GetCommandLineA
GetProcessHeap
GetStartupInfoA
RaiseException
RtlUnwind
ExitProcess
HeapSize
SetStdHandle
GetFileType
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapDestroy
HeapCreate
GetStdHandle
Sleep
SetHandleCount
GetACP
IsValidCodePage
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
GetTimeZoneInformation
GetDriveTypeA
GetConsoleCP
GetConsoleMode
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEnvironmentVariableA
GlobalFlags
GetCurrentDirectoryA
InterlockedIncrement
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
CreateFileA
GetFullPathNameA
GetVolumeInformationA
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GetThreadLocale
FindFirstFileA
FindNextFileA
FindClose
LocalAlloc
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
FileTimeToLocalFileTime
FileTimeToSystemTime
GlobalGetAtomNameA
GlobalFindAtomA
lstrcmpW
GetVersionExA
GetCurrentProcessId
InterlockedDecrement
GetModuleFileNameW
LoadLibraryA
FreeResource
GlobalAddAtomA
WritePrivateProfileStringA
WaitForSingleObject
CloseHandle
GlobalDeleteAtom
GetCurrentThread
GetCurrentThreadId
ConvertDefaultLocale
EnumResourceLanguagesA
GetLocaleInfoA
LoadLibraryExA
lstrcmpA
FreeLibrary
GetModuleHandleA
GetProcAddress
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageA
LocalFree
MulDiv
SetLastError
FindResourceA
LoadResource
LockResource
SizeofResource
lstrcpyA
CreateDirectoryA
GetModuleFileNameA
GetLocalTime
lstrlenA
CompareStringA
GetLastError
MultiByteToWideChar
CompareStringW
InterlockedExchange
WideCharToMultiByte
GetVersion
VirtualFree
user32
GetSysColorBrush
EndPaint
BeginPaint
ClientToScreen
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
ShowWindow
SetWindowTextA
IsDialogMessageA
RegisterWindowMessageA
SendDlgItemMessageA
WinHelpA
GetCapture
GetClassLongA
GetClassNameA
SetPropA
RemovePropA
SetFocus
GetWindowTextA
GetForegroundWindow
GetTopWindow
GetMessageTime
GetMessagePos
MapWindowPoints
SetForegroundWindow
UpdateWindow
GetMenu
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
GetSysColor
AdjustWindowRectEx
PtInRect
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
SetWindowLongA
SetWindowPos
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
GetWindow
GetWindowThreadProcessId
GetLastActivePopup
MessageBoxA
UnhookWindowsHookEx
ReleaseDC
GetDC
CopyRect
SetCursor
GetDesktopWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
IsWindow
GetWindowLongA
GetDlgItem
IsWindowEnabled
GetNextDlgTabItem
EndDialog
SetWindowsHookExA
CallNextHookEx
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
IsWindowVisible
GetKeyState
PeekMessageA
GetCursorPos
ValidateRect
SetMenuItemBitmaps
DestroyMenu
UnregisterClassA
GetMenuCheckMarkDimensions
LoadBitmapA
LoadCursorA
GetFocus
GetParent
ModifyMenuA
EnableMenuItem
CheckMenuItem
PostMessageA
PostQuitMessage
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
KillTimer
DrawIcon
GetClientRect
GetSystemMetrics
EnableWindow
IsIconic
SetTimer
SendMessageA
LoadIconA
CharUpperA
GetPropA
gdi32
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
DeleteDC
GetStockObject
SetViewportExtEx
DeleteObject
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
GetDeviceCaps
SetMapMode
RestoreDC
SaveDC
GetObjectA
SetBkColor
SetTextColor
GetClipBox
CreateBitmap
comdlg32
GetFileTitleA
winspool.drv
ClosePrinter
DocumentPropertiesA
OpenPrinterA
advapi32
RegSetValueExA
RegQueryValueA
RegEnumKeyA
RegDeleteKeyA
RegCloseKey
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
RegOpenKeyA
shell32
SHGetSpecialFolderPathA
ShellExecuteA
comctl32
InitCommonControlsEx
shlwapi
PathFindExtensionA
UrlUnescapeA
PathStripToRootA
PathFindFileNameA
PathIsUNCA
oleaut32
VariantClear
VariantChangeType
VariantInit
wininet
HttpAddRequestHeadersA
HttpQueryInfoA
InternetCloseHandle
InternetGetLastResponseInfoA
InternetOpenA
InternetSetStatusCallback
InternetSetFilePointer
InternetWriteFile
InternetReadFile
HttpSendRequestA
InternetConnectA
InternetOpenUrlA
HttpOpenRequestA
InternetCrackUrlA
InternetCanonicalizeUrlA
InternetQueryOptionA
InternetSetOptionExA
InternetQueryDataAvailable
Sections
.text Size: 176KB - Virtual size: 173KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 40KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ