Static task
static1
Behavioral task
behavioral1
Sample
91d97b9373f46d23ff66c2b811809160bb00055b8f841a1137ab22fd98ae9652.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
91d97b9373f46d23ff66c2b811809160bb00055b8f841a1137ab22fd98ae9652.exe
Resource
win10v2004-20220812-en
General
-
Target
91d97b9373f46d23ff66c2b811809160bb00055b8f841a1137ab22fd98ae9652
-
Size
349KB
-
MD5
87f929b515217253ac859662e8e30ef7
-
SHA1
accdbb389cd6ea112a17b87d80ef8f540548e81d
-
SHA256
91d97b9373f46d23ff66c2b811809160bb00055b8f841a1137ab22fd98ae9652
-
SHA512
45a7f21c13b5bf7906c355fbefd2f179c3915ca32be38183c0c7a71135627ea092c11494c646e08489ed0a27d3f20ebdb440b6d3de575149ba9ff4efd7231e22
-
SSDEEP
6144:OhBu3tH/qyhsbuR1TAnC0BxoUhSluCp3QmxsVDuWDB16wXSwRfk+fWy8E+EMr:c0xCyLR1MnCs3qp3fKVDuWd1zf1WTEU
Malware Config
Signatures
Files
-
91d97b9373f46d23ff66c2b811809160bb00055b8f841a1137ab22fd98ae9652.exe windows x86
48ec3ddc05be64ce1b5178a422e66d28
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
wininet
InternetCrackUrlA
InternetCanonicalizeUrlA
kernel32
SetHandleCount
lstrcmpiA
VirtualQuery
FindFirstFileA
GetUserDefaultLCID
lstrlenA
VirtualAlloc
VirtualProtect
GetLocalTime
GetCurrentDirectoryA
TerminateThread
HeapAlloc
DeleteCriticalSection
ResetEvent
SetUnhandledExceptionFilter
LocalFree
TlsFree
LCMapStringW
GetSystemTimeAsFileTime
ReadFile
GetSystemInfo
GetModuleHandleA
GetFileSize
IsValidCodePage
DeleteFileA
ReleaseMutex
CloseHandle
CreateFileA
ProcessIdToSessionId
GetShortPathNameA
MoveFileA
GetThreadLocale
RemoveDirectoryA
IsValidLocale
FreeEnvironmentStringsA
SetFilePointer
HeapFree
WaitForSingleObject
CreateMutexA
RaiseException
lstrcpynA
IsBadCodePtr
EnterCriticalSection
SetStdHandle
FlushFileBuffers
GetTimeZoneInformation
MoveFileExA
GetPrivateProfileIntA
LoadLibraryExA
CreateEventA
TlsGetValue
CopyFileA
SetThreadPriority
lstrlenW
GetWindowsDirectoryA
VirtualFree
WriteFile
GetStdHandle
GetOEMCP
SetFileAttributesA
TlsSetValue
OutputDebugStringA
GetACP
FreeLibrary
HeapSize
SetEndOfFile
LeaveCriticalSection
TlsAlloc
FileTimeToSystemTime
CompareStringA
WideCharToMultiByte
UnhandledExceptionFilter
GetPrivateProfileStringA
HeapReAlloc
GetCurrentThreadId
CompareFileTime
CopyFileExA
SetEnvironmentVariableA
SetLastError
FindNextFileA
OpenProcess
LCMapStringA
SystemTimeToFileTime
GetFileType
GetSystemDirectoryA
RtlUnwind
GetCommandLineA
CompareStringW
EnumSystemLocalesA
CreateThread
FormatMessageA
CreateDirectoryA
GetDiskFreeSpaceExA
FindClose
GetThreadPriority
FreeEnvironmentStringsW
HeapDestroy
oleaut32
SysAllocStringByteLen
SysFreeString
VariantClear
SysAllocString
version
GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA
user32
CharPrevA
PostMessageA
FindWindowExA
GetSystemMetrics
MessageBoxA
CharUpperA
ole32
CoCreateInstance
CoInitialize
CoUninitialize
CoInitializeEx
shlwapi
PathRemoveFileSpecA
PathFileExistsA
advapi32
RegOpenKeyExA
AdjustTokenPrivileges
ImpersonateLoggedOnUser
OpenProcessToken
RegOpenKeyExW
GetTokenInformation
SetTokenInformation
IsTextUnicode
RevertToSelf
InitializeSecurityDescriptor
RegQueryValueExW
RegCloseKey
LookupPrivilegeValueA
DuplicateTokenEx
RegQueryValueExA
SetSecurityDescriptorDacl
iphlpapi
GetAdaptersInfo
GetTcpTable
GetUdpTable
GetNumberOfInterfaces
GetFriendlyIfIndex
GetPerAdapterInfo
GetIpAddrTable
UnenableRouter
GetIpStatistics
Icmp6CreateFile
IcmpCloseHandle
GetNetworkParams
inseng
GetICifFileFromFile
DllGetClassObject
Sections
.text Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 319KB - Virtual size: 536KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ