Static task
static1
Behavioral task
behavioral1
Sample
c4a7a030fea08c1b293f1450333a0b226d7ab75928a1adb6e6a51f7e391748e2.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c4a7a030fea08c1b293f1450333a0b226d7ab75928a1adb6e6a51f7e391748e2.exe
Resource
win10v2004-20221111-en
General
-
Target
c4a7a030fea08c1b293f1450333a0b226d7ab75928a1adb6e6a51f7e391748e2
-
Size
972KB
-
MD5
4222d11ba37d5b8884b4e45ca8aeecee
-
SHA1
221b7b5378a33811d0caefa955f3a693f7fe3da2
-
SHA256
c4a7a030fea08c1b293f1450333a0b226d7ab75928a1adb6e6a51f7e391748e2
-
SHA512
db2a28e904bc5a15a52c99fb5f156b945d159fef2cd373146e6eedb6492f66c5503725bea76eadc77aabbdfbe7b3157c2cfe99a10cc62f72ec91e40c392895bf
-
SSDEEP
12288:npZ7RqTHG1GtRmjWjRlgivK2YyUxUi2MOOpnjuNIOHeOPYxYIswU6fsDukauZHcO:f7YTmhUlV4xUlOJjuN5HeU+hX9etGj
Malware Config
Signatures
Files
-
c4a7a030fea08c1b293f1450333a0b226d7ab75928a1adb6e6a51f7e391748e2.exe windows x86
e80b51cc40160ed78f00874671004bd7
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
wininet
InternetConnectW
InternetCloseHandle
InternetOpenW
InternetCanonicalizeUrlW
HttpQueryInfoW
HttpSendRequestW
HttpOpenRequestW
InternetReadFile
winmm
PlaySoundW
kernel32
RaiseException
SwitchToThread
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
GetStdHandle
CloseHandle
GetSystemTimeAsFileTime
GetModuleFileNameW
CreateProcessW
WaitForMultipleObjects
GetProcAddress
GetSystemInfo
GetModuleHandleW
GetTempPathW
GetVersionExW
GetCurrentProcess
DeviceIoControl
CreateFileW
SetPriorityClass
QueryPerformanceCounter
GetThreadTimes
GetCurrentThread
WriteConsoleW
SetStdHandle
GetTimeZoneInformation
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCurrentProcessId
ReadConsoleW
GetOEMCP
GetACP
IsValidCodePage
UnregisterWaitEx
GetProcessHeap
LoadLibraryW
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
ReleaseSemaphore
GetModuleHandleA
FreeLibraryAndExitThread
FreeLibrary
OutputDebugStringW
VirtualProtect
VirtualFree
VirtualAlloc
SetFilePointerEx
GetFileType
GetConsoleMode
GetConsoleCP
WriteFile
FlushFileBuffers
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
UnregisterWait
RegisterWaitForSingleObject
SetThreadAffinityMask
GetProcessAffinityMask
GetNumaHighestNodeNumber
DeleteTimerQueueTimer
ChangeTimerQueueTimer
CreateTimerQueueTimer
GetLogicalProcessorInformation
GetThreadPriority
SetThreadPriority
SignalObjectAndWait
WaitForSingleObjectEx
HeapSize
HeapFree
HeapReAlloc
HeapAlloc
DecodePointer
DeleteFileW
GetFileAttributesW
GetLastError
QueryDepthSList
SetEnvironmentVariableA
SetEndOfFile
InterlockedFlushSList
SetEvent
CreateTimerQueue
LoadLibraryExW
ExitThread
CreateThread
CreateSemaphoreW
GetTickCount
GetStartupInfoW
DuplicateHandle
GetCurrentThreadId
WideCharToMultiByte
MultiByteToWideChar
GetStringTypeW
EnterCriticalSection
LeaveCriticalSection
EncodePointer
RtlUnwind
ExitProcess
GetModuleHandleExW
ReadFile
IsDebuggerPresent
IsProcessorFeaturePresent
GetCPInfo
GetCommandLineW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
CreateEventW
Sleep
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
user32
SendMessageW
MoveWindow
LoadStringW
EndPaint
BeginPaint
UpdateWindow
RegisterClassExW
PostQuitMessage
DefWindowProcW
SystemParametersInfoW
ReleaseDC
GetDC
LoadIconW
SetCursorPos
SetFocus
FindWindowW
DestroyIcon
TranslateAcceleratorW
LoadAcceleratorsW
EnableWindow
EndDialog
DialogBoxParamW
DispatchMessageW
TranslateMessage
GetMessageW
GetDlgItem
SetWindowLongW
GetWindowLongW
GetSysColor
SetCursor
RemovePropW
GetPropW
SetPropW
InvalidateRect
CallWindowProcW
SetWindowPos
ShowWindow
CreateWindowExW
PostMessageW
GetParent
MessageBoxW
GetWindowRect
GetClientRect
SetWindowTextW
GetSystemMetrics
IsDlgButtonChecked
LoadCursorW
gdi32
SelectObject
GetTextExtentPoint32W
GetObjectW
SetTextColor
GetStockObject
DeleteObject
CreateFontIndirectW
GetTextMetricsW
comdlg32
GetSaveFileNameW
advapi32
RegSetValueExW
RegQueryValueExW
RegOpenKeyExW
RegCreateKeyW
RegOpenCurrentUser
RegCloseKey
shell32
ShellExecuteW
ShellExecuteExW
SHGetFolderPathW
SHCreateDirectoryExW
ole32
CoUninitialize
CoCreateInstance
CoInitialize
Sections
.text Size: 712KB - Virtual size: 711KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 166KB - Virtual size: 166KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 28KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 37KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ