Static task
static1
Behavioral task
behavioral1
Sample
4ab510627d1f429e4fc453f5c46bd3a7cf5b2254fcba363c285e92454e2b3ecf.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
4ab510627d1f429e4fc453f5c46bd3a7cf5b2254fcba363c285e92454e2b3ecf.exe
Resource
win10v2004-20220812-en
General
-
Target
4ab510627d1f429e4fc453f5c46bd3a7cf5b2254fcba363c285e92454e2b3ecf
-
Size
149KB
-
MD5
d0036f39e5d91170313f0b6b54391cd2
-
SHA1
5884d54b9aef483610ea9bc8e9828679d6073951
-
SHA256
4ab510627d1f429e4fc453f5c46bd3a7cf5b2254fcba363c285e92454e2b3ecf
-
SHA512
afb3f2a22f03d08f47211e282e8b2d4da645798bfc6cb7436bb4bbd6225d45a105bd1a6c1cce8487b2a567a41724cac6d9ae8a9e5b81e82b74e1a2f560e21d23
-
SSDEEP
1536:Q9FX/kSS8Rr3/9ph8vVS22oCJIY0meA1SNxbJY2J+7jQ21nVo:gkSS2hbJI/NxbJY2J+7jQ21na
Malware Config
Signatures
Files
-
4ab510627d1f429e4fc453f5c46bd3a7cf5b2254fcba363c285e92454e2b3ecf.exe windows x86
921be8f4e76a4742f6b307da6c648bef
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
winhttp
WinHttpQueryHeaders
WinHttpSendRequest
WinHttpReadData
WinHttpGetIEProxyConfigForCurrentUser
WinHttpGetProxyForUrl
WinHttpSetOption
WinHttpReceiveResponse
WinHttpCrackUrl
WinHttpCloseHandle
WinHttpOpen
WinHttpConnect
WinHttpOpenRequest
shlwapi
StrToIntW
StrCpyW
StrStrIW
StrToIntExA
PathAddBackslashW
StrCatW
comctl32
InitCommonControlsEx
urlmon
URLDownloadToCacheFileW
kernel32
GetLocaleInfoA
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetSystemTimeAsFileTime
HeapFree
GetProcessHeap
IsWow64Process
GetCurrentProcess
GetVersionExW
CloseHandle
ReadFile
CreateFileW
GetFileSize
GetTickCount
GetLastError
WaitForSingleObject
CreateProcessW
lstrcatW
FreeLibrary
LoadLibraryExW
DeleteFileW
lstrcpyW
LeaveCriticalSection
EnterCriticalSection
lstrlenW
GlobalFree
lstrcmpiW
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
GetCurrentProcessId
GetModuleFileNameW
GetExitCodeThread
GetStringTypeA
Sleep
HeapAlloc
CreateEventW
WaitForMultipleObjects
ResumeThread
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
LoadLibraryW
lstrcmpiA
lstrlenA
lstrcatA
TerminateProcess
OpenProcess
GetModuleHandleW
InitializeCriticalSectionAndSpinCount
lstrcpyA
FlushFileBuffers
WriteFile
SetFilePointer
RemoveDirectoryW
CreateDirectoryW
GetTempFileNameW
GetTempPathW
OpenFileMappingW
LocalFree
QueryPerformanceCounter
GetFileType
SetHandleCount
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
HeapSize
GetModuleFileNameA
GetStdHandle
ExitProcess
HeapCreate
HeapReAlloc
VirtualAlloc
VirtualFree
DeleteCriticalSection
GetStringTypeW
LCMapStringA
LCMapStringW
CreateThread
InterlockedDecrement
GetCurrentThreadId
SetLastError
InterlockedIncrement
RtlUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
GetCommandLineA
GetStartupInfoA
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
LoadLibraryA
user32
SetWindowTextW
GetDlgItemTextW
SetDlgItemTextW
LoadIconW
GetDlgItem
SendMessageW
GetWindowLongW
SetWindowLongW
wsprintfW
DestroyMenu
TrackPopupMenuEx
GetCursorPos
AppendMenuW
CreatePopupMenu
ShowWindow
DialogBoxParamW
SetTimer
gdi32
GetStockObject
CreateFontIndirectW
GetObjectW
advapi32
GetSecurityDescriptorSacl
SetSecurityInfo
ConvertStringSecurityDescriptorToSecurityDescriptorA
ConvertStringSecurityDescriptorToSecurityDescriptorW
shell32
ShellExecuteW
CommandLineToArgvW
Shell_NotifyIconW
Sections
.text Size: 63KB - Virtual size: 63KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 46KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ