Static task
static1
Behavioral task
behavioral1
Sample
42685b016ec00c5f7e746981e350e6df00676d2ad4706230ff8230757f6ee0cd.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
42685b016ec00c5f7e746981e350e6df00676d2ad4706230ff8230757f6ee0cd.exe
Resource
win10v2004-20220812-en
General
-
Target
42685b016ec00c5f7e746981e350e6df00676d2ad4706230ff8230757f6ee0cd
-
Size
804KB
-
MD5
995299937f1f02f41bc50982f757e0e8
-
SHA1
b4b04114479c83ed9ddb97a73e61ae8ff0df3d20
-
SHA256
42685b016ec00c5f7e746981e350e6df00676d2ad4706230ff8230757f6ee0cd
-
SHA512
86748c13f406de884f794b30846518b0eff02a9b75f9d4fb400e78af97e3bc4beadd6044155558161ced630a20cdb948027192b2057e9ebe1065763b40342f81
-
SSDEEP
12288:RSDD1dCymR1q/AD9yjl+OIh5cPIdAGXdLvpydEFEZch7E7Xg:U7ORIADsja7pXpvHx9Ek
Malware Config
Signatures
Files
-
42685b016ec00c5f7e746981e350e6df00676d2ad4706230ff8230757f6ee0cd.exe windows x86
c59a7715039b14f0a3ada4b8b084ee7e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
InterlockedDecrement
OpenWaitableTimerA
SetFileAttributesW
GetDateFormatA
lstrcpy
GetCPInfo
LoadModule
QueryPerformanceCounter
VirtualAlloc
GetCalendarInfoA
FlushFileBuffers
GetModuleHandleW
RemoveDirectoryA
DeleteCriticalSection
GetFileType
WriteFile
GetConsoleMode
UnhandledExceptionFilter
WriteFileEx
GetStartupInfoA
CreateMutexA
WriteConsoleA
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
GetTimeZoneInformation
GetStdHandle
GetCommandLineA
FindFirstFileExA
IsValidLocale
SetUnhandledExceptionFilter
TlsSetValue
HeapSize
OpenMutexA
TlsFree
GetSystemDirectoryW
GetTempPathW
TerminateProcess
ExitProcess
GetModuleHandleA
LCMapStringA
WriteConsoleW
GetLocalTime
lstrcmpiW
SystemTimeToTzSpecificLocalTime
FreeEnvironmentStringsW
LeaveCriticalSection
SetEnvironmentVariableA
GetLocaleInfoW
Sleep
TlsAlloc
RtlUnwind
GetOEMCP
EnterCriticalSection
GetCurrentProcessId
CloseHandle
VirtualFree
CreateFileA
TlsGetValue
SetVolumeLabelA
HeapReAlloc
GetCurrentDirectoryA
SetFilePointer
ReadFile
HeapDestroy
GetThreadTimes
HeapCreate
CompareFileTime
GetConsoleOutputCP
HeapAlloc
SetConsoleWindowInfo
GetWindowsDirectoryW
GetCurrentThreadId
LocalReAlloc
EnumCalendarInfoExW
FindAtomA
GetUserDefaultLCID
GetProcAddress
CompareStringW
WritePrivateProfileStructA
InterlockedIncrement
GetEnvironmentStringsW
GetConsoleCP
FreeLibrary
WideCharToMultiByte
GetStringTypeA
WritePrivateProfileStringW
AddAtomA
RaiseException
SetConsoleCtrlHandler
OutputDebugStringW
RtlFillMemory
GetModuleFileNameA
UnlockFileEx
OpenSemaphoreA
GetPrivateProfileSectionW
GetSystemDirectoryA
GetDriveTypeW
WriteConsoleOutputA
GetTickCount
VirtualFreeEx
GetProfileIntW
MultiByteToWideChar
LoadLibraryExW
GetTimeFormatA
EnumDateFormatsExW
HeapFree
GetACP
WritePrivateProfileSectionW
GetStringTypeW
GetVolumeInformationA
CompareStringA
SetStdHandle
GetPrivateProfileStringW
GetEnvironmentStrings
CreateEventA
GetCurrentProcess
GetLogicalDriveStringsA
EnumSystemLocalesA
ReadConsoleA
SetLocalTime
LCMapStringW
GetLocaleInfoA
GetLastError
GetStringTypeExW
InterlockedExchange
EnumDateFormatsExA
GetCurrentThread
GetDiskFreeSpaceExW
FreeEnvironmentStringsA
IsValidCodePage
LoadLibraryA
ReadConsoleW
IsDebuggerPresent
SetHandleCount
VirtualQuery
SetLastError
advapi32
CryptHashData
LookupAccountSidA
RegQueryMultipleValuesA
RegRestoreKeyW
RegDeleteValueA
RegQueryValueExW
CryptSignHashW
RegOpenKeyExW
RegSaveKeyW
CryptEncrypt
LookupSecurityDescriptorPartsA
RegQueryValueA
CryptSignHashA
CryptExportKey
RegEnumKeyW
gdi32
SetPixelFormat
CreateDCW
PathToRegion
CreateBrushIndirect
SelectObject
UnrealizeObject
GetBkColor
CreateFontW
AbortPath
GetObjectW
CreateDiscardableBitmap
GetDeviceCaps
GetViewportOrgEx
CreateHalftonePalette
PolyTextOutA
DeleteDC
GetDIBits
comctl32
ImageList_GetFlags
CreateMappedBitmap
ImageList_GetDragImage
CreatePropertySheetPage
ImageList_DragLeave
ImageList_AddIcon
ImageList_Write
ImageList_Draw
ImageList_SetFilter
ImageList_SetOverlayImage
ImageList_SetBkColor
ImageList_Add
GetEffectiveClientRect
MakeDragList
DrawStatusTextW
InitCommonControlsEx
wininet
InternetGetCertByURL
ShowClientAuthCerts
InternetCrackUrlA
InternetSetDialState
InternetSetDialStateW
InternetCombineUrlW
user32
SystemParametersInfoA
GetScrollRange
GetWindowLongA
ScreenToClient
RegisterDeviceNotificationA
CharUpperW
GetDesktopWindow
IsCharUpperW
GetDlgItemTextA
SetWindowContextHelpId
GetMessagePos
SetWindowLongW
CreateWindowExA
VkKeyScanA
LockWindowUpdate
OpenWindowStationW
DdeNameService
VkKeyScanW
RegisterClassA
SetPropW
ChangeDisplaySettingsW
GetClassInfoA
GetMenuBarInfo
GetMenuStringW
MapVirtualKeyExW
IsDlgButtonChecked
GetWindowTextW
RegisterClassExA
DdeQueryNextServer
FindWindowA
WinHelpW
CharToOemBuffA
MonitorFromRect
GetWindow
DdeInitializeA
Sections
.text Size: 172KB - Virtual size: 171KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 404KB - Virtual size: 401KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 140KB - Virtual size: 139KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 84KB - Virtual size: 82KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ