Static task
static1
Behavioral task
behavioral1
Sample
fb647ae3f86cd2c3b0d2dfb83d437ba107f79c9f450def530258818212114975.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
fb647ae3f86cd2c3b0d2dfb83d437ba107f79c9f450def530258818212114975.exe
Resource
win10v2004-20220812-en
General
-
Target
fb647ae3f86cd2c3b0d2dfb83d437ba107f79c9f450def530258818212114975
-
Size
906KB
-
MD5
f696bf4a0a51b76e58eaeb8bf64cf300
-
SHA1
6ac2f53006d4e3ce5927827eebf12b8cc1287ccb
-
SHA256
fb647ae3f86cd2c3b0d2dfb83d437ba107f79c9f450def530258818212114975
-
SHA512
4b410bed2af97d40cb14f973a6514d5c9dec83f1e7c643d816266f48c34b40ba8f3c8b3e000a8189aef47a485c821ec9020ec71e14623050ce842faa6f8c2f4c
-
SSDEEP
12288:EHAttjAD+mZbj4DhfB45Rakvw5AGXWVrhNb9tiM2meaZEcqAOyRlgUFWtkweitIm:ElDJgn4TaZe+ur7LIan3y2W
Malware Config
Signatures
Files
-
fb647ae3f86cd2c3b0d2dfb83d437ba107f79c9f450def530258818212114975.exe windows x86
aa5d33b0ffb2a5a88452990207b5af2e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
wininet
InternetCloseHandle
InternetConnectW
InternetOpenW
InternetCanonicalizeUrlW
HttpQueryInfoW
HttpSendRequestW
HttpOpenRequestW
InternetReadFile
kernel32
GetProcAddress
GetSystemInfo
GetModuleHandleW
GetTempPathW
GetVersionExW
InterlockedFlushSList
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
ReleaseSemaphore
VirtualProtect
VirtualFree
VirtualAlloc
GetModuleHandleA
FreeLibraryAndExitThread
GetThreadTimes
OutputDebugStringW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCurrentProcessId
QueryPerformanceCounter
FreeLibrary
GetTimeZoneInformation
WaitForMultipleObjects
GetACP
IsValidCodePage
SetFilePointerEx
ReadFile
GetFileType
GetStdHandle
GetConsoleMode
GetConsoleCP
WriteFile
FlushFileBuffers
GetProcessHeap
HeapSize
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
LoadLibraryExW
ExitThread
CreateSemaphoreW
GetTickCount
GetStartupInfoW
TerminateProcess
CreateProcessW
GetModuleFileNameW
GetSystemTimeAsFileTime
CloseHandle
DeleteFileW
GetLastError
GetFileAttributesW
UnregisterWaitEx
QueryDepthSList
WriteConsoleW
SetStdHandle
ReadConsoleW
CreateFileW
LoadLibraryW
SetEndOfFile
GetOEMCP
GetCurrentThread
CreateEventW
InitializeCriticalSectionAndSpinCount
SetLastError
SetUnhandledExceptionFilter
UnhandledExceptionFilter
UnregisterWait
RegisterWaitForSingleObject
SetThreadAffinityMask
GetProcessAffinityMask
GetCurrentThreadId
WideCharToMultiByte
MultiByteToWideChar
GetStringTypeW
DuplicateHandle
GetCurrentProcess
SetEnvironmentVariableA
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
EncodePointer
DecodePointer
RaiseException
RtlUnwind
HeapFree
HeapReAlloc
IsDebuggerPresent
IsProcessorFeaturePresent
GetCPInfo
HeapAlloc
ExitProcess
GetModuleHandleExW
GetCommandLineW
CreateTimerQueue
SetEvent
WaitForSingleObjectEx
Sleep
SignalObjectAndWait
SwitchToThread
CreateThread
SetThreadPriority
GetThreadPriority
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetLogicalProcessorInformation
CreateTimerQueueTimer
ChangeTimerQueueTimer
DeleteTimerQueueTimer
GetNumaHighestNodeNumber
user32
MoveWindow
SetWindowLongW
GetDlgItem
LoadStringW
LoadIconW
EndPaint
BeginPaint
UpdateWindow
EndDialog
DialogBoxParamW
RegisterClassExW
PostQuitMessage
DefWindowProcW
SystemParametersInfoW
ReleaseDC
GetDC
EnableWindow
DestroyIcon
MessageBoxW
TranslateAcceleratorW
LoadAcceleratorsW
DispatchMessageW
TranslateMessage
GetMessageW
LoadCursorW
IsDlgButtonChecked
GetWindowLongW
GetSysColor
SetCursor
RemovePropW
GetPropW
SetPropW
InvalidateRect
CallWindowProcW
SetWindowTextW
SetWindowPos
ShowWindow
CreateWindowExW
PostMessageW
GetParent
GetWindowRect
GetClientRect
GetSystemMetrics
SendMessageW
gdi32
SelectObject
GetTextExtentPoint32W
GetObjectW
SetTextColor
GetStockObject
DeleteObject
CreateFontIndirectW
GetTextMetricsW
comdlg32
GetSaveFileNameW
advapi32
RegQueryValueExW
RegOpenKeyExW
RegOpenCurrentUser
RegCloseKey
shell32
SHGetFolderPathW
ShellExecuteW
ShellExecuteExW
SHCreateDirectoryExW
ole32
CoUninitialize
CoInitialize
Sections
.text Size: 640KB - Virtual size: 639KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 216KB - Virtual size: 216KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 23KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ