Static task
static1
Behavioral task
behavioral1
Sample
2fd3f7757ee0b116517695ca3ccba3526a24b1464c02db7e0617cd10f809f6c5.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2fd3f7757ee0b116517695ca3ccba3526a24b1464c02db7e0617cd10f809f6c5.exe
Resource
win10v2004-20220812-en
General
-
Target
2fd3f7757ee0b116517695ca3ccba3526a24b1464c02db7e0617cd10f809f6c5
-
Size
551KB
-
MD5
c572c8209ca70b33a5723949cc79e45c
-
SHA1
20f7d73f80fb82a31a7fb301596672c8445c3b30
-
SHA256
2fd3f7757ee0b116517695ca3ccba3526a24b1464c02db7e0617cd10f809f6c5
-
SHA512
afa459a3e89150855db7a4a8552201bf61178fce3388887e710b3a302f4bc65ad65958cf452d0d91831eaf46551b38124eddbcb82c3bc8359f9ee258744e71c6
-
SSDEEP
12288:NmQQ1UDqCJUdBOkuLZSyEtpmZ4X02syHDCqYv7bTd:7QerJiYPLZS73OZKtY7V
Malware Config
Signatures
Files
-
2fd3f7757ee0b116517695ca3ccba3526a24b1464c02db7e0617cd10f809f6c5.exe windows x86
6c5dbf55236962bdc326358616e320d1
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
wininet
InternetCloseHandle
InternetOpenW
InternetConnectW
InternetOpenUrlW
HttpQueryInfoW
HttpSendRequestW
HttpOpenRequestW
InternetReadFile
comctl32
InitCommonControlsEx
winmm
timeSetEvent
kernel32
WaitForMultipleObjects
CreateEventW
OpenEventW
GetSystemTimeAsFileTime
GetModuleFileNameW
CreateProcessW
GetProcAddress
GetSystemInfo
GetModuleHandleW
GetTempPathW
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
ReleaseSemaphore
VirtualProtect
VirtualFree
VirtualAlloc
GetModuleHandleA
FreeLibraryAndExitThread
FreeLibrary
GetThreadTimes
OutputDebugStringW
GetOEMCP
GetACP
IsValidCodePage
UnregisterWaitEx
DeleteFileW
GetCurrentProcessId
QueryPerformanceCounter
SetFilePointerEx
ReadFile
GetFileType
GetStdHandle
GetConsoleMode
GetConsoleCP
FlushFileBuffers
GetProcessHeap
HeapSize
GetModuleHandleExW
ExitProcess
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
UnregisterWait
RegisterWaitForSingleObject
SetThreadAffinityMask
GetProcessAffinityMask
GetNumaHighestNodeNumber
DeleteTimerQueueTimer
ChangeTimerQueueTimer
GetLastError
GetVersionExW
CreateFileW
CloseHandle
WriteFile
GetFileAttributesW
InterlockedFlushSList
GetEnvironmentStringsW
QueryDepthSList
SetStdHandle
GetTimeZoneInformation
WriteConsoleW
ReadConsoleW
LoadLibraryW
SetEndOfFile
FreeEnvironmentStringsW
GetCurrentProcess
CreateTimerQueueTimer
GetLogicalProcessorInformation
GetThreadPriority
SetThreadPriority
SwitchToThread
SignalObjectAndWait
WaitForSingleObjectEx
SetEvent
DuplicateHandle
SetEnvironmentVariableA
GetCurrentThread
GetCurrentThreadId
WideCharToMultiByte
MultiByteToWideChar
GetStringTypeW
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
EncodePointer
DecodePointer
RaiseException
RtlUnwind
IsDebuggerPresent
IsProcessorFeaturePresent
HeapFree
CreateThread
ExitThread
LoadLibraryExW
HeapReAlloc
GetCPInfo
HeapAlloc
GetCommandLineW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
InitializeCriticalSectionAndSpinCount
Sleep
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetTickCount
CreateSemaphoreW
CreateTimerQueue
user32
SetPropW
DispatchMessageW
LoadStringW
DestroyIcon
LoadIconW
SetCursorPos
MessageBoxW
GetWindowRect
SetWindowTextW
EndPaint
BeginPaint
UpdateWindow
GetSystemMetrics
TranslateAcceleratorW
LoadAcceleratorsW
EnableWindow
IsDlgButtonChecked
GetDlgItem
EndDialog
DialogBoxParamW
MoveWindow
ShowWindow
RegisterClassExW
PostQuitMessage
DefWindowProcW
GetPropW
TranslateMessage
GetMessageW
LoadCursorW
GetSysColor
SetCursor
RemovePropW
InvalidateRect
CallWindowProcW
SystemParametersInfoW
EnumWindows
GetParent
SetWindowLongW
GetWindowLongW
GetClientRect
GetWindowTextW
ReleaseDC
GetDC
CreateWindowExW
PostMessageW
SendMessageW
gdi32
SetTextColor
GetStockObject
GetTextMetricsW
SelectObject
GetTextExtentPoint32W
DeleteObject
CreateFontIndirectW
GetObjectW
comdlg32
GetSaveFileNameW
advapi32
RegQueryValueExW
RegOpenKeyExW
RegCreateKeyW
RegOpenCurrentUser
RegCloseKey
RegSetValueExW
shell32
ShellExecuteW
SHGetFolderPathW
ShellExecuteExW
SHCreateDirectoryExW
ole32
CoInitialize
Sections
.text Size: 420KB - Virtual size: 420KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 86KB - Virtual size: 86KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 15KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ