Static task
static1
Behavioral task
behavioral1
Sample
bdf36dff4a8f60cdea68c2c6ecdccde446e5eeb5ea41dbe7b7d4351ae042ab2e.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
bdf36dff4a8f60cdea68c2c6ecdccde446e5eeb5ea41dbe7b7d4351ae042ab2e.exe
Resource
win10v2004-20220901-en
General
-
Target
bdf36dff4a8f60cdea68c2c6ecdccde446e5eeb5ea41dbe7b7d4351ae042ab2e
-
Size
748KB
-
MD5
792aff13149340fcd3e99e38d659a14d
-
SHA1
0432bc23dd8504cec78963eae9f9ab3655e509ec
-
SHA256
bdf36dff4a8f60cdea68c2c6ecdccde446e5eeb5ea41dbe7b7d4351ae042ab2e
-
SHA512
cd668dbc9b4833cf6e91f772b371585a8eda60ee8d7605eecf4fb920631cfdea674743cc3f338f67a32db4659a12ba06abd5ddd041bc037d8d2d28a4b3c37683
-
SSDEEP
12288:gjc01k4gjGc60Eg+/CK+oRKr2tXkjUEt1qh6y9ZanS6X5NGaAwGxd4:gIZ4gjyFg+/CK+R2yjwh6uZaSSMaax
Malware Config
Signatures
Files
-
bdf36dff4a8f60cdea68c2c6ecdccde446e5eeb5ea41dbe7b7d4351ae042ab2e.exe windows x86
5ef9859791bf3d2a8c8fed4765fad19b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
wininet
DeleteUrlCacheEntryW
FtpGetFileEx
SetUrlCacheGroupAttributeA
HttpAddRequestHeadersW
FindNextUrlCacheContainerA
InternetSetDialState
GopherFindFirstFileW
user32
GetMenuDefaultItem
DdeCreateStringHandleA
RegisterClassA
RegisterClassExA
IsCharAlphaW
GetGuiResources
IsClipboardFormatAvailable
DdeGetLastError
RemoveMenu
CreateCursor
InvertRect
CreateDialogIndirectParamA
wsprintfW
GetKeyboardLayoutList
LoadCursorW
EndPaint
LoadIconW
comctl32
CreateStatusWindowA
ImageList_LoadImageA
ImageList_GetImageInfo
InitCommonControlsEx
ImageList_Merge
ImageList_AddIcon
ImageList_Destroy
ImageList_GetImageRect
ImageList_Remove
ImageList_Create
ImageList_SetBkColor
ImageList_BeginDrag
ImageList_Duplicate
ImageList_Copy
ImageList_DragEnter
ImageList_LoadImageW
kernel32
SetLocalTime
OpenMutexA
SetStdHandle
GetSystemDirectoryW
GetModuleFileNameA
GetFileType
CopyFileA
GetLastError
ExitThread
DeleteCriticalSection
EnterCriticalSection
CompareStringW
HeapAlloc
GetPrivateProfileSectionA
LoadLibraryA
FreeEnvironmentStringsW
GetVersion
SetUnhandledExceptionFilter
GetCurrentThread
SetEnvironmentVariableA
GetOEMCP
FormatMessageW
GetStringTypeA
GetCurrentProcessId
GetProfileIntW
LeaveCriticalSection
VirtualProtectEx
FreeEnvironmentStringsA
FlushFileBuffers
GetCurrentDirectoryW
VirtualFree
CloseHandle
InterlockedExchange
ReadFile
HeapDestroy
SetHandleCount
GetModuleHandleA
TlsGetValue
RtlZeroMemory
CreateMutexW
GetACP
GetSystemTime
WriteFile
LocalSize
SetSystemTime
GetTimeZoneInformation
QueryPerformanceCounter
CreateMutexA
lstrcatA
GetCPInfo
LoadLibraryW
lstrlenW
GetEnvironmentStringsW
SetLastError
SetThreadPriority
HeapReAlloc
SetFilePointer
GetLocalTime
GetSystemDirectoryA
SetThreadContext
LocalAlloc
GetSystemTimeAsFileTime
ReleaseMutex
CompareStringA
HeapCreate
ExitProcess
WideCharToMultiByte
OpenEventA
GetProcAddress
GetCurrentThreadId
RaiseException
TlsAlloc
MultiByteToWideChar
GetTickCount
InterlockedDecrement
AddAtomA
GetProcessShutdownParameters
TlsSetValue
GetEnvironmentStrings
GetStdHandle
FindFirstFileW
VirtualAlloc
GetPrivateProfileSectionW
GetCurrentProcess
SetEnvironmentVariableW
RtlUnwind
SetTimeZoneInformation
GetVolumeInformationW
lstrcmpi
LCMapStringW
TerminateProcess
DosDateTimeToFileTime
TlsFree
GetStartupInfoA
AllocConsole
IsBadWritePtr
GetPriorityClass
InterlockedIncrement
GetStringTypeW
VirtualQuery
WaitForSingleObject
OpenWaitableTimerW
HeapFree
GetExitCodeThread
InitializeCriticalSection
GetCommandLineA
UnhandledExceptionFilter
LCMapStringA
OpenFileMappingA
CreateDirectoryW
Sections
.text Size: 148KB - Virtual size: 146KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 404KB - Virtual size: 400KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 132KB - Virtual size: 130KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 60KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ