Static task
static1
Behavioral task
behavioral1
Sample
70e385d773a3345c581dd0391e3c55a52231c93759f38e65029e873b2be26846.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
70e385d773a3345c581dd0391e3c55a52231c93759f38e65029e873b2be26846.exe
Resource
win10v2004-20220812-en
General
-
Target
70e385d773a3345c581dd0391e3c55a52231c93759f38e65029e873b2be26846
-
Size
437KB
-
MD5
f13c10768b07c13e5e84a77e0636efa1
-
SHA1
d9d2b63be63b823bcefac716e99d4a8192ae1bb4
-
SHA256
70e385d773a3345c581dd0391e3c55a52231c93759f38e65029e873b2be26846
-
SHA512
0db347f9d6c1bd040e9011db4892ec0aa3f0a7952e64846d6966e6a29cd0a8af37f28ee9971e003c554b9cee6709a4d02b748ff55d89e50a133e049446afa208
-
SSDEEP
12288:V186cz1Bm0ta6MNckqCOD3zX/5nDrgnfe9x:VhBvQkqCOH5nDf9x
Malware Config
Signatures
Files
-
70e385d773a3345c581dd0391e3c55a52231c93759f38e65029e873b2be26846.exe windows x86
175045074a03b9ce6ca26d169ca90b9f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
fread
fopen
kernel32
QueryDosDeviceA
GetTickCount
GetWindowsDirectoryA
GetVersionExW
ReadConsoleA
EnumCalendarInfoW
CallNamedPipeA
SetFileTime
SetLocalTime
mprapi
CompressPhoneNumber
MprAdminBufferFree
MprAdminConnectionClearStats
MprAdminConnectionEnum
MprAdminConnectionGetInfo
MprAdminDeregisterConnectionNotification
catsrv
DllCanUnloadNow
httpapi
HttpAddFragmentToCache
msi
MsiLocateComponentW
MsiMessageBoxA
MsiMessageBoxExA
MsiMessageBoxExW
MsiMessageBoxW
MsiNotifySidChangeA
MsiNotifySidChangeW
MsiOpenDatabaseA
MsiOpenDatabaseW
MsiOpenPackageA
MsiOpenPackageExA
MsiOpenPackageExW
MsiOpenPackageW
MsiOpenProductA
MsiOpenProductW
MsiLocateComponentW
MsiMessageBoxA
MsiMessageBoxExA
MsiMessageBoxExW
MsiMessageBoxW
MsiNotifySidChangeA
MsiNotifySidChangeW
MsiOpenDatabaseA
MsiOpenDatabaseW
MsiOpenPackageA
MsiOpenPackageExA
MsiOpenPackageExW
MsiOpenPackageW
MsiOpenProductA
MsiOpenProductW
ole32
CoDosDateTimeToFileTime
CoEnableCallCancellation
CoFileTimeNow
CoFileTimeToDosDateTime
CoFreeAllLibraries
CoFreeLibrary
CoFreeUnusedLibraries
CoFreeUnusedLibrariesEx
CoGetApartmentID
CoGetCallContext
CoGetCallerTID
CoGetCancelObject
CoGetClassObject
CoGetClassVersion
CoGetComCatalog
CoGetContextToken
CoDosDateTimeToFileTime
CoEnableCallCancellation
CoFileTimeNow
CoFileTimeToDosDateTime
CoFreeAllLibraries
CoFreeLibrary
CoFreeUnusedLibraries
CoFreeUnusedLibrariesEx
CoGetApartmentID
CoGetCallContext
CoGetCallerTID
CoGetCancelObject
CoGetClassObject
CoGetClassVersion
CoGetComCatalog
CoGetContextToken
CoDosDateTimeToFileTime
CoEnableCallCancellation
CoFileTimeNow
CoFileTimeToDosDateTime
CoFreeAllLibraries
CoFreeLibrary
CoFreeUnusedLibraries
CoFreeUnusedLibrariesEx
CoGetApartmentID
CoGetCallContext
CoGetCallerTID
CoGetCancelObject
CoGetClassObject
CoGetClassVersion
CoGetComCatalog
CoGetContextToken
CoDosDateTimeToFileTime
CoEnableCallCancellation
CoFileTimeNow
CoFileTimeToDosDateTime
CoFreeAllLibraries
CoFreeLibrary
CoFreeUnusedLibraries
CoFreeUnusedLibrariesEx
CoGetApartmentID
CoGetCallContext
CoGetCallerTID
CoGetCancelObject
CoGetClassObject
CoGetClassVersion
CoGetComCatalog
CoGetContextToken
activeds
ADsEncodeBinaryData
ADsFreeEnumerator
ADsEncodeBinaryData
ADsFreeEnumerator
mshtml
CreateHTMLPropertyPage
CreateHTMLPropertyPage
Sections
text Size: 1KB - Virtual size: 10KB
IMAGE_SCN_MEM_READ
.bss Size: 10KB - Virtual size: 84KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 421KB - Virtual size: 428KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ