Static task
static1
Behavioral task
behavioral1
Sample
4eb1159862971f991c03c8ca18811063bcd1533cd1ab0b47f23e99eab28f60de.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
4eb1159862971f991c03c8ca18811063bcd1533cd1ab0b47f23e99eab28f60de.exe
Resource
win10v2004-20221111-en
General
-
Target
4eb1159862971f991c03c8ca18811063bcd1533cd1ab0b47f23e99eab28f60de
-
Size
71KB
-
MD5
a94b8db73453828d38c23b2ba7959cd9
-
SHA1
c8f155276d44b32bdd4ee0a93dcc575da83504f7
-
SHA256
4eb1159862971f991c03c8ca18811063bcd1533cd1ab0b47f23e99eab28f60de
-
SHA512
903548ec03112b1f7750996d763f98a8eeac16bbfc857eafcd337bc7e4927e7942770254f9b9eacbde37d727298f82c99f51670ab5bc5c5dfcdc0f2be245cfc2
-
SSDEEP
1536:ei0FXzgHY599LMynN/FKC0ZDFtfSFE1jG:ei0S41LHn6CkqFs
Malware Config
Signatures
Files
-
4eb1159862971f991c03c8ca18811063bcd1533cd1ab0b47f23e99eab28f60de.exe windows x86
3ec6d7a201f6b9683dd1283f9a378e7a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
CloseHandle
CompareFileTime
DeleteCriticalSection
DisableThreadLibraryCalls
EnterCriticalSection
ExitProcess
FreeLibrary
GetLastError
GetSystemTime
GetSystemTimeAsFileTime
InitializeCriticalSection
InterlockedDecrement
InterlockedIncrement
IsValidCodePage
IsValidLocale
LeaveCriticalSection
LocalAlloc
LocalFree
QueryPerformanceCounter
QueryPerformanceFrequency
SetEvent
SetUnhandledExceptionFilter
SystemTimeToFileTime
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualQuery
WaitForSingleObject
WideCharToMultiByte
lstrcpyA
lstrcpynA
lstrlenA
lstrlenW
user32
IsWindow
RegisterShellHookWindow
ole32
CoCreateInstance
CoInitialize
CoTaskMemAlloc
CoUninitialize
SetErrorInfo
oleaut32
LoadRegTypeLib
LoadTypeLib
RegisterTypeLib
SysAllocString
SysAllocStringLen
SysFreeString
VariantClear
wininet
CommitUrlCacheEntryW
CreateUrlCacheEntryW
HttpOpenRequestA
InternetOpenUrlW
SetUrlCacheEntryInfoW
Sections
.text Size: 60KB - Virtual size: 59KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 255B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ