Static task
static1
Behavioral task
behavioral1
Sample
dfe50738ac3a0a3610691e46a35482b2b766b3ce065428fc61e784498bd0c6c4.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
dfe50738ac3a0a3610691e46a35482b2b766b3ce065428fc61e784498bd0c6c4.exe
Resource
win10v2004-20221111-en
General
-
Target
dfe50738ac3a0a3610691e46a35482b2b766b3ce065428fc61e784498bd0c6c4
-
Size
652KB
-
MD5
3895966d9e20ea6bfe6367474324362f
-
SHA1
35d5e98ba46bdee4c33fa7bc276306400235e42d
-
SHA256
dfe50738ac3a0a3610691e46a35482b2b766b3ce065428fc61e784498bd0c6c4
-
SHA512
667f2395f7c88c72fbf9fe93815bc568988eadb9c451bd7336ba87baf1c1fc07615700bc272d4d6b02889bf45bf02795a79798946fcb8abca2c5b3d19344e3c0
-
SSDEEP
12288:p4GijqPx9Z712Rd11UZI1TJKwC1DEf75BGIAeDlXHNn:FZU1osTF94IXDlN
Malware Config
Signatures
Files
-
dfe50738ac3a0a3610691e46a35482b2b766b3ce065428fc61e784498bd0c6c4.exe windows x86
103e8b17dcfdc516e26dcfb68a3f606d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
wininet
InternetQueryOptionA
FtpDeleteFileW
GetUrlCacheEntryInfoA
FtpCreateDirectoryA
InternetWriteFileExW
InternetLockRequestFile
GetUrlCacheConfigInfoW
InternetSetCookieA
SetUrlCacheEntryInfoA
user32
MessageBoxExA
EnumDisplaySettingsW
ScrollDC
MsgWaitForMultipleObjects
PeekMessageW
DestroyCaret
EnumDisplayDevicesW
ScrollWindowEx
ExcludeUpdateRgn
RegisterDeviceNotificationA
GetNextDlgGroupItem
DestroyWindow
PeekMessageA
SetWindowsHookW
CloseClipboard
MessageBoxIndirectA
GetInputDesktop
ShowWindow
RegisterClassExA
DdeQueryNextServer
SetFocus
CharLowerA
ShowScrollBar
MapVirtualKeyW
EnumDisplayDevicesA
GetFocus
SetWindowWord
IsCharLowerW
CharUpperA
DefWindowProcW
DdeClientTransaction
DrawTextW
MessageBoxA
RegisterClassA
CreateWindowExA
DlgDirListComboBoxW
comdlg32
PageSetupDlgW
GetFileTitleA
ChooseFontW
kernel32
GetPrivateProfileStringW
GetLastError
TlsGetValue
SetFileAttributesW
DebugBreak
GetEnvironmentStringsW
GetVersionExA
GetUserDefaultLCID
GetStringTypeA
GetProcAddress
LeaveCriticalSection
IsValidLocale
MoveFileExA
lstrlenA
InitializeCriticalSectionAndSpinCount
GetProfileSectionA
WriteProfileStringW
SetHandleCount
WriteProfileSectionW
InterlockedDecrement
SetStdHandle
GetLocaleInfoW
GetACP
GetExitCodeProcess
IsValidCodePage
WriteConsoleW
GetStartupInfoA
TlsSetValue
MoveFileA
GetConsoleTitleW
UnhandledExceptionFilter
GetTickCount
SetConsoleCP
IsDebuggerPresent
SetEnvironmentVariableA
GetTimeZoneInformation
InterlockedExchange
CreateThread
CreateFileMappingA
QueryPerformanceCounter
HeapReAlloc
SetConsoleTitleW
GetModuleFileNameW
FindNextFileW
LocalCompact
OpenFileMappingA
MultiByteToWideChar
CreateMutexA
GetCurrentProcess
InterlockedIncrement
SetConsoleCtrlHandler
GlobalFree
GetSystemTimeAsFileTime
HeapDestroy
WriteConsoleOutputA
SetLocalTime
VirtualAlloc
OpenMutexA
RemoveDirectoryA
InitializeCriticalSection
FreeEnvironmentStringsA
EnumSystemLocalesA
GetCurrentProcessId
FlushFileBuffers
GetLocaleInfoA
LoadLibraryExW
CreateEventW
SetPriorityClass
GetCurrentDirectoryW
GetEnvironmentStrings
CommConfigDialogA
SetThreadIdealProcessor
FreeEnvironmentStringsW
EnumDateFormatsA
GetCurrentThreadId
WriteConsoleA
ResumeThread
GetStringTypeExA
TlsFree
SetConsoleTextAttribute
CompareStringW
HeapAlloc
TlsAlloc
DeleteCriticalSection
GetStartupInfoW
GetFileType
GetCompressedFileSizeW
GetProfileIntW
HeapSize
SetComputerNameW
FreeLibrary
LoadLibraryA
EnterCriticalSection
GetConsoleCP
SetFilePointer
LCMapStringA
GetNumberFormatW
WriteConsoleInputW
lstrcpyW
CloseHandle
GetCommandLineA
GetProcessHeap
GetAtomNameA
GetSystemDefaultLCID
ContinueDebugEvent
CreateFileA
GetModuleHandleA
GetConsoleOutputCP
GetCPInfo
GetTimeFormatA
CompareStringA
GetCurrentThread
SetConsoleScreenBufferSize
GetModuleFileNameA
WriteConsoleOutputCharacterW
GetDiskFreeSpaceA
Sleep
GetStdHandle
ExitProcess
VirtualFree
VirtualQuery
TerminateProcess
GlobalAddAtomW
SetEvent
GetWindowsDirectoryW
GetEnvironmentStringsA
ReadFile
SetLastError
SetLocaleInfoA
SetConsoleMode
CreateFileMappingW
GetDateFormatA
GetOEMCP
DosDateTimeToFileTime
WideCharToMultiByte
GetCommandLineW
GetStringTypeW
RemoveDirectoryW
LCMapStringW
HeapCreate
WriteFile
RtlFillMemory
WriteProfileStringA
IsBadReadPtr
GetExitCodeThread
SetUnhandledExceptionFilter
RtlUnwind
EnumDateFormatsExA
GlobalDeleteAtom
CreateDirectoryExW
GetConsoleMode
HeapFree
EnumSystemCodePagesW
gdi32
DeleteDC
GetObjectW
CreateEllipticRgn
GetDeviceCaps
GetBrushOrgEx
SaveDC
RemoveFontResourceW
GdiFlush
GetMapMode
GetGraphicsMode
CancelDC
CreateDCA
SetStretchBltMode
CreateScalableFontResourceW
SwapBuffers
comctl32
ImageList_GetIcon
ImageList_DrawIndirect
ImageList_GetDragImage
DrawStatusText
ImageList_Merge
InitCommonControlsEx
ImageList_EndDrag
Sections
.text Size: 188KB - Virtual size: 186KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 308KB - Virtual size: 306KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 128KB - Virtual size: 130KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ