Static task
static1
Behavioral task
behavioral1
Sample
95a6ea323fcae9c72ec81a6e3dd404f8402c7381c29631d4504a5c4b54e19625.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
95a6ea323fcae9c72ec81a6e3dd404f8402c7381c29631d4504a5c4b54e19625.exe
Resource
win10v2004-20221111-en
General
-
Target
95a6ea323fcae9c72ec81a6e3dd404f8402c7381c29631d4504a5c4b54e19625
-
Size
347KB
-
MD5
c392735e645d59c93b3be2ce8498077e
-
SHA1
de1819d42704c58f40bc11c177143db9bff226c4
-
SHA256
95a6ea323fcae9c72ec81a6e3dd404f8402c7381c29631d4504a5c4b54e19625
-
SHA512
f723c6b8dcf52839d7c50edcf41b35ef04a96a0b51f67a6e35ed75b169f221e666d93b6bf4799995d3a43da7c3f8d7468d7f683af776a6e75738637d1a92c5ec
-
SSDEEP
6144:OW1gQUbxqckQXlop+A7hR3v2r+tTCuIAO0+Bz7OZMSjxN:zgQUbxTVa+A7hRf++tTCdp/MM4
Malware Config
Signatures
Files
-
95a6ea323fcae9c72ec81a6e3dd404f8402c7381c29631d4504a5c4b54e19625.exe windows x86
856a9ad51ce5c6d5d90a548a380cc93b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
wininet
InternetCloseHandle
InternetOpenA
InternetOpenUrlA
InternetSetOptionExA
InternetReadFile
kernel32
SetStdHandle
GetProcAddress
CloseHandle
CreateFileA
LoadLibraryA
WriteFile
MultiByteToWideChar
WideCharToMultiByte
GetLastError
DeleteFileA
MoveFileA
GetModuleFileNameA
CreateToolhelp32Snapshot
Process32First
OpenProcess
GetPriorityClass
Process32Next
TerminateProcess
GetTickCount
WinExec
Sleep
GetPrivateProfileIntA
OutputDebugStringA
GetModuleHandleA
GetCurrentProcess
GetPrivateProfileStringA
SetPriorityClass
GlobalAlloc
GlobalFree
FormatMessageA
FreeLibrary
FlushFileBuffers
WaitForSingleObject
GetExitCodeProcess
CreatePipe
GetStringTypeW
IsValidLocale
WriteConsoleW
GetLocaleInfoA
GetUserDefaultLCID
GetTimeZoneInformation
CompareStringW
GetLocaleInfoW
LoadLibraryW
GetCurrentProcessId
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
IsValidCodePage
GetOEMCP
GetACP
GetCurrentThreadId
SetLastError
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
HeapSize
GetConsoleMode
GetConsoleCP
ReadFile
GetFileType
SetEndOfFile
GetProcessHeap
SetEnvironmentVariableA
SetHandleCount
SetFilePointer
InitializeCriticalSectionAndSpinCount
IsProcessorFeaturePresent
HeapCreate
GetModuleFileNameW
GetStdHandle
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
LCMapStringW
EnumSystemLocalesA
CreateFileW
InterlockedIncrement
InterlockedDecrement
EncodePointer
DecodePointer
InterlockedExchange
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
HeapAlloc
HeapFree
GetFileAttributesA
GetCommandLineA
HeapSetInformation
GetStartupInfoW
HeapReAlloc
GetModuleHandleW
ExitProcess
RtlUnwind
GetSystemTimeAsFileTime
GetTimeFormatA
GetDateFormatA
CreateProcessA
DuplicateHandle
RaiseException
GetCPInfo
user32
GetWindowTextA
FindWindowA
DefWindowProcA
FindWindowExA
GetClientRect
GetWindowTextLengthA
SendMessageA
GetAsyncKeyState
SetWindowLongA
MessageBoxA
GetWindowLongA
SetWindowPos
SystemParametersInfoA
GetSystemMetrics
MoveWindow
PostQuitMessage
RegisterClassExA
UpdateWindow
ShowWindow
DispatchMessageA
TranslateMessage
TranslateAcceleratorA
GetMessageA
SetTimer
CreateWindowExA
GetForegroundWindow
ole32
OleInitialize
OleCreate
OleSetContainedObject
oleaut32
VariantClear
SysAllocString
VariantInit
iphlpapi
GetAdaptersInfo
Sections
.text Size: 222KB - Virtual size: 222KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 89KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 138KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ