Static task
static1
Behavioral task
behavioral1
Sample
ea46a8469f478dfdde6aff43d2be7f479791b6d8b9b02f0146d028d257db55d2.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ea46a8469f478dfdde6aff43d2be7f479791b6d8b9b02f0146d028d257db55d2.exe
Resource
win10v2004-20220812-en
General
-
Target
ea46a8469f478dfdde6aff43d2be7f479791b6d8b9b02f0146d028d257db55d2
-
Size
793KB
-
MD5
abe4322f94d33d90508768e86f9d818a
-
SHA1
798f17a3deb5782c97f3e1c271b376d7120de24f
-
SHA256
ea46a8469f478dfdde6aff43d2be7f479791b6d8b9b02f0146d028d257db55d2
-
SHA512
4d0309b5ae340feca5598c8ef04d528fe294cd87ed000f5839288fc3b56db539b5bb6c88fb569c21d4cd46da2fa976606a678924e96121dfb40e632afe58afbe
-
SSDEEP
24576:fCLTklTdQjqUTMhksC/TxzEaGuY2FOa1:fxOVdsIFYK
Malware Config
Signatures
Files
-
ea46a8469f478dfdde6aff43d2be7f479791b6d8b9b02f0146d028d257db55d2.exe windows x86
7733a7a4a2ecd972faec1c875a793bce
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
wininet
InternetCheckConnectionA
InternetGetCookieA
HttpQueryInfoW
InternetAutodial
FindNextUrlCacheEntryExA
RetrieveUrlCacheEntryStreamA
FtpFindFirstFileW
user32
GetListBoxInfo
MessageBoxW
GetMenu
GetDlgItemInt
IsCharAlphaNumericA
FlashWindow
DefFrameProcW
GetWindowLongA
AppendMenuW
DdeCreateStringHandleA
CopyAcceleratorTableA
RegisterClassExA
DialogBoxIndirectParamA
IsCharLowerW
InvalidateRgn
DestroyWindow
DdeConnect
OpenWindowStationW
DefWindowProcW
ImpersonateDdeClientWindow
CreateWindowExA
ShowWindow
OemToCharW
GetClipboardFormatNameA
RegisterClassA
ReuseDDElParam
IsDialogMessageW
kernel32
MultiByteToWideChar
GetVersionExW
GetProcessHeap
FindNextFileW
GetLocaleInfoA
GetSystemDefaultLCID
GetModuleFileNameA
WriteProfileStringW
GetConsoleCursorInfo
GetOEMCP
IsDebuggerPresent
TlsGetValue
HeapDestroy
GetDateFormatA
FlushInstructionCache
RtlUnwind
GetLastError
lstrcmpi
CreateToolhelp32Snapshot
RemoveDirectoryW
GetLocaleInfoW
GetConsoleOutputCP
SetEndOfFile
CreateFileMappingA
EnumResourceNamesA
GetCalendarInfoA
TlsFree
DeleteAtom
MoveFileExW
InterlockedIncrement
SetUnhandledExceptionFilter
FillConsoleOutputCharacterA
GetStringTypeA
SetFilePointer
GetModuleHandleA
AddAtomA
SetSystemTime
OpenSemaphoreW
GetSystemInfo
LoadLibraryA
HeapCreate
LCMapStringW
lstrcpyA
GetCurrentThreadId
InterlockedDecrement
GetCPInfo
EnumCalendarInfoW
GetCurrentProcessId
EnterCriticalSection
DosDateTimeToFileTime
WideCharToMultiByte
LCMapStringA
WritePrivateProfileSectionW
FreeEnvironmentStringsW
GetFileType
Sleep
FreeEnvironmentStringsA
GetCommandLineA
LeaveCriticalSection
FreeLibrary
HeapAlloc
lstrlen
GlobalDeleteAtom
GetCurrentThread
IsValidCodePage
GetStringTypeW
EnumResourceTypesA
FlushFileBuffers
CompareStringW
GetConsoleCP
WriteConsoleW
OpenMutexA
SetConsoleCursorPosition
GetUserDefaultLCID
MapViewOfFileEx
GetVersionExA
DeleteCriticalSection
VirtualFree
VirtualQuery
SetStdHandle
EnumSystemLocalesA
CreateFileA
EnumSystemLocalesW
GetEnvironmentStrings
LocalFree
GetEnvironmentStringsW
IsValidLocale
GetTimeFormatA
GetACP
SystemTimeToTzSpecificLocalTime
HeapReAlloc
CreateNamedPipeA
InitializeCriticalSection
GetCurrentProcess
CreateMutexA
GetProcAddress
GetStartupInfoA
ReadFile
SetEnvironmentVariableW
SetLastError
RtlFillMemory
ResetEvent
CreateMailslotW
InterlockedExchange
GetStdHandle
GlobalGetAtomNameW
CopyFileExA
CompareStringA
TerminateProcess
GetTimeFormatW
SetConsoleCtrlHandler
SetEnvironmentVariableA
SetPriorityClass
UnlockFileEx
GetPrivateProfileStructW
LocalHandle
RtlZeroMemory
GetUserDefaultLangID
ExitProcess
UnhandledExceptionFilter
CloseHandle
SetHandleCount
VirtualAlloc
GetLogicalDriveStringsW
HeapSize
ResumeThread
GetConsoleMode
FileTimeToDosDateTime
GetProfileStringW
FileTimeToLocalFileTime
SetConsoleTitleA
TlsSetValue
AddAtomW
MapViewOfFile
WriteConsoleA
lstrcpy
WriteFile
QueryPerformanceCounter
ExitThread
GlobalFree
SetVolumeLabelW
GetTimeZoneInformation
GetPrivateProfileStringA
GetSystemTimeAsFileTime
GetTickCount
SetVolumeLabelA
HeapFree
TlsAlloc
comctl32
ImageList_GetImageRect
ImageList_DrawEx
ImageList_GetFlags
MakeDragList
ImageList_Read
InitCommonControlsEx
_TrackMouseEvent
CreateStatusWindowW
ImageList_Add
DestroyPropertySheetPage
InitMUILanguage
Sections
.text Size: 194KB - Virtual size: 194KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 401KB - Virtual size: 400KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 143KB - Virtual size: 150KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 53KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ