Static task
static1
Behavioral task
behavioral1
Sample
f7a115b91e57eabab607aaf7e4da4c7739a718edf6a3e5010c59f193cf4eea2a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f7a115b91e57eabab607aaf7e4da4c7739a718edf6a3e5010c59f193cf4eea2a.exe
Resource
win10v2004-20220812-en
General
-
Target
f7a115b91e57eabab607aaf7e4da4c7739a718edf6a3e5010c59f193cf4eea2a
-
Size
443KB
-
MD5
68e7e941f20b946ebbfd103f1c2583f1
-
SHA1
d4b04bd9019817abc6289711c35aacee06858495
-
SHA256
f7a115b91e57eabab607aaf7e4da4c7739a718edf6a3e5010c59f193cf4eea2a
-
SHA512
e924821af4b4073a9462dd074c124f45f6ca3a0060232ef5c30c6e2896a28a349fff2da89eadc0bb4b63d8b1b29a433066b30c72ddddc28537a7c5b821a12eed
-
SSDEEP
6144:dbXaBWjLoV+qw+x1DsWg/0ET1O8/XHxvxyHu7oi6Uet7EzKSXIr:dnoVC+PDHrET1O8PHxsHu7oibY7EzKS
Malware Config
Signatures
Files
-
f7a115b91e57eabab607aaf7e4da4c7739a718edf6a3e5010c59f193cf4eea2a.exe windows x86
0172c27bcd227e004a7bf85fb4cc28ec
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
wininet
InternetCloseHandle
InternetOpenW
InternetConnectW
InternetOpenUrlW
HttpQueryInfoW
HttpSendRequestW
HttpOpenRequestW
InternetReadFile
comctl32
InitCommonControlsEx
winmm
timeSetEvent
kernel32
CreateThread
WaitForMultipleObjects
CreateEventW
OpenEventW
GetSystemTimeAsFileTime
GetModuleFileNameW
CreateProcessW
GetProcAddress
GetSystemInfo
GetModuleHandleW
GetTempPathW
GetCurrentProcessId
QueryPerformanceCounter
GetOEMCP
GetACP
IsValidCodePage
SetFilePointerEx
ReadFile
GetFileType
GetStdHandle
GetConsoleMode
GetConsoleCP
FlushFileBuffers
GetProcessHeap
HeapSize
GetModuleHandleExW
DeleteFileW
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
GetStartupInfoW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
TerminateProcess
GetCurrentProcess
Sleep
InitializeCriticalSectionAndSpinCount
SetLastError
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCommandLineW
HeapAlloc
GetCPInfo
LoadLibraryExW
ExitThread
GetCurrentThreadId
GetLastError
GetVersionExW
CreateFileW
CloseHandle
WriteFile
GetFileAttributesW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
GetTimeZoneInformation
SetStdHandle
WriteConsoleW
ReadConsoleW
OutputDebugStringW
SetEndOfFile
ExitProcess
HeapReAlloc
HeapFree
IsProcessorFeaturePresent
IsDebuggerPresent
RtlUnwind
RaiseException
DecodePointer
EncodePointer
WideCharToMultiByte
MultiByteToWideChar
GetStringTypeW
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
user32
SetPropW
TranslateMessage
LoadStringW
DestroyIcon
LoadIconW
MessageBoxW
GetWindowRect
SetWindowTextW
EndPaint
BeginPaint
UpdateWindow
GetSystemMetrics
TranslateAcceleratorW
LoadAcceleratorsW
EnableWindow
IsDlgButtonChecked
GetDlgItem
EndDialog
DialogBoxParamW
MoveWindow
ShowWindow
RegisterClassExW
PostQuitMessage
DefWindowProcW
DispatchMessageW
GetPropW
GetMessageW
LoadCursorW
GetSysColor
SetCursor
RemovePropW
InvalidateRect
CallWindowProcW
SystemParametersInfoW
GetParent
SetWindowLongW
GetWindowLongW
GetClientRect
ReleaseDC
GetDC
CreateWindowExW
PostMessageW
SendMessageW
gdi32
SetTextColor
GetStockObject
GetTextMetricsW
SelectObject
GetTextExtentPoint32W
DeleteObject
CreateFontIndirectW
GetObjectW
comdlg32
GetSaveFileNameW
advapi32
RegQueryValueExW
RegOpenKeyExW
RegOpenCurrentUser
RegCloseKey
shell32
ShellExecuteW
SHGetFolderPathW
ShellExecuteExW
SHCreateDirectoryExW
ole32
CoInitialize
Sections
.text Size: 348KB - Virtual size: 347KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 75KB - Virtual size: 74KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ