Static task
static1
Behavioral task
behavioral1
Sample
02624b63f232bf3e7a5979d4d587ad916480e0be742487a2fce5f1bc2787996a.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
02624b63f232bf3e7a5979d4d587ad916480e0be742487a2fce5f1bc2787996a.exe
Resource
win10v2004-20221111-en
General
-
Target
02624b63f232bf3e7a5979d4d587ad916480e0be742487a2fce5f1bc2787996a
-
Size
148KB
-
MD5
063dedda330c2af4c72c6f11a153c394
-
SHA1
75b919d3907f731cd6fe69c4ab5510fbcfaf8f07
-
SHA256
02624b63f232bf3e7a5979d4d587ad916480e0be742487a2fce5f1bc2787996a
-
SHA512
f750e4f70959ac5aa916210d68564e6f6d1301dec72858bfc60567ab17c235d693160b28a22a025176bb4dd028b80815f75a2b1f118a0da7e162fcf757e414b8
-
SSDEEP
3072:NEbaZidQRqJrc9XCHlzylVBmaca+gzoI7h+aS1Gf:QabMrMXsJuMgzo0naGf
Malware Config
Signatures
Files
-
02624b63f232bf3e7a5979d4d587ad916480e0be742487a2fce5f1bc2787996a.exe windows x86
7a75ed087be86b3808f28b3a28210e0d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
wininet
InternetOpenW
HttpQueryInfoW
InternetReadFile
HttpSendRequestW
HttpEndRequestW
HttpSendRequestExW
HttpOpenRequestW
InternetCrackUrlW
InternetCloseHandle
InternetConnectW
kernel32
GetLocaleInfoA
GetThreadLocale
GetVersionExW
RaiseException
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
FlushInstructionCache
GetCurrentProcess
HeapAlloc
GetProcessHeap
GetCurrentThreadId
InterlockedIncrement
InterlockedDecrement
lstrlenW
lstrcpyW
GetModuleHandleW
GetModuleFileNameW
GetLastError
FreeLibrary
MultiByteToWideChar
SizeofResource
LoadResource
FindResourceW
LoadLibraryExW
lstrcmpiW
lstrcpynW
LockResource
FindResourceExW
CloseHandle
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
GetFileSize
GetACP
WideCharToMultiByte
WaitForSingleObject
CreateThread
WriteFile
GetTempPathW
SetFilePointer
FlushFileBuffers
SetStdHandle
GetCPInfo
GetOEMCP
IsBadCodePtr
IsBadReadPtr
LoadLibraryA
GetStartupInfoA
GetFileType
SetHandleCount
GetCommandLineW
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetStdHandle
TerminateProcess
GetProcAddress
TlsGetValue
TlsSetValue
TlsFree
CreateFileW
InterlockedExchange
SetEndOfFile
SetLastError
ReadFile
VirtualProtect
GetSystemInfo
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
TlsAlloc
IsBadWritePtr
VirtualAlloc
HeapFree
GetVersionExA
HeapDestroy
HeapReAlloc
HeapSize
ExitProcess
RtlUnwind
GetModuleHandleA
GetStartupInfoW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
SetUnhandledExceptionFilter
VirtualQuery
HeapCreate
VirtualFree
user32
GetWindowTextW
GetSystemMetrics
LoadImageW
SendMessageW
PostQuitMessage
GetParent
GetWindow
GetWindowRect
SystemParametersInfoW
GetClientRect
MapWindowPoints
SetWindowPos
GetDlgItem
GetWindowLongW
GetDlgCtrlID
CharNextW
DefWindowProcW
CreateDialogParamW
DestroyWindow
PeekMessageW
GetMessageW
TranslateMessage
DispatchMessageW
UnregisterClassW
ShowWindow
SetWindowLongW
IsDialogMessageW
gdi32
CreateSolidBrush
advapi32
RegCreateKeyExW
RegDeleteValueW
RegSetValueExW
RegEnumKeyExW
RegQueryInfoKeyW
RegCloseKey
RegOpenKeyExW
RegDeleteKeyW
ole32
CoUninitialize
CoInitialize
CoTaskMemFree
CoTaskMemAlloc
CoTaskMemRealloc
CoCreateInstance
oleaut32
VarUI4FromStr
comctl32
InitCommonControlsEx
Sections
.text Size: 60KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ