Static task
static1
Behavioral task
behavioral1
Sample
769a1324c2dea7dc5a26c18b09cb4799b48fc8872c2d2574a20de36120571578.exe
Resource
win7-20220812-en
General
-
Target
769a1324c2dea7dc5a26c18b09cb4799b48fc8872c2d2574a20de36120571578
-
Size
309KB
-
MD5
f28f89a4fff1cd4eb8b3a709f633f7ad
-
SHA1
4352ce294d7fb16e00e61f73cd8d7a2070e50452
-
SHA256
769a1324c2dea7dc5a26c18b09cb4799b48fc8872c2d2574a20de36120571578
-
SHA512
803850c78d3045463696eb579d3b09e51c7fb333b0c2af5116b6767e7024382833e174fc7a5ae14c8d5ae6f901a418d44d8b7aaac4cf403d165e1a18e097ebe6
-
SSDEEP
3072:fCbsl8NTcogpNg3wzVnTKE0gkm+gXHbSVrmR9uIIVBItmFL3y0vvnClxvtZYFnWx:jl8NTc5fVnavmP3bU1BrrvPCXcRWOS
Malware Config
Signatures
Files
-
769a1324c2dea7dc5a26c18b09cb4799b48fc8872c2d2574a20de36120571578.exe windows x86
1b960c21a58e0e8874d2ce46161293c0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
wininet
InternetCrackUrlW
version
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
kernel32
LoadResource
FindResourceW
LoadLibraryExW
GetModuleHandleW
CloseHandle
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
ReadProcessMemory
WriteProcessMemory
VirtualFreeEx
VirtualAllocEx
OpenProcess
GetCurrentProcessId
WaitForSingleObject
Sleep
CreateThread
CreateEventW
GetCommandLineW
GetProcAddress
LoadLibraryW
GetVersionExW
LockResource
FindResourceExW
GetCurrentThreadId
SetEvent
ExpandEnvironmentStringsW
LocalFree
FindClose
FindNextFileW
FindFirstFileW
GetCurrentProcess
CreateFileW
CreateDirectoryW
LocalAlloc
ReleaseMutex
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
OpenFileMappingW
lstrcpyW
WideCharToMultiByte
GetTempPathW
lstrcatW
GetComputerNameW
OpenEventW
CreateMutexW
WaitForMultipleObjects
GetTickCount
WriteFile
GetStringTypeW
GetStringTypeA
LoadLibraryA
QueryPerformanceCounter
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
SetFilePointer
ReadFile
GetStartupInfoA
GetFileType
SizeofResource
MultiByteToWideChar
FreeLibrary
GetModuleFileNameW
LeaveCriticalSection
EnterCriticalSection
InterlockedDecrement
InterlockedIncrement
lstrcmpiW
GetLastError
DeleteCriticalSection
InitializeCriticalSection
RaiseException
lstrlenW
WriteConsoleW
SetEndOfFile
SetHandleCount
LCMapStringW
LCMapStringA
IsValidCodePage
GetOEMCP
GetCPInfo
GetConsoleOutputCP
WriteConsoleA
FlushFileBuffers
SetStdHandle
CreateFileA
GetConsoleMode
GetConsoleCP
SetLastError
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetModuleFileNameA
GetStdHandle
ExitProcess
GetModuleHandleA
HeapCreate
VirtualAlloc
VirtualFree
GetStartupInfoW
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExA
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
RtlUnwind
GetSystemTimeAsFileTime
TerminateProcess
user32
PeekMessageW
MsgWaitForMultipleObjects
wsprintfW
UnregisterClassA
PostThreadMessageW
GetMessageW
DispatchMessageW
TranslateMessage
SendMessageW
GetWindowThreadProcessId
IsWindow
CharNextW
CharUpperW
advapi32
GetUserNameW
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges
RegLoadKeyW
RegUnLoadKeyW
RegNotifyChangeKeyValue
RegQueryValueExW
GetSecurityDescriptorLength
RegSetValueExA
RegEnumKeyExW
RegQueryInfoKeyW
RegSetValueExW
RegOpenKeyExW
RegCreateKeyExW
RegCloseKey
RegDeleteValueW
RegDeleteKeyW
shell32
SHGetFolderPathW
SHGetSpecialFolderPathW
SHGetSpecialFolderLocation
SHGetPathFromIDListW
SHGetMalloc
ole32
StringFromGUID2
CoTaskMemFree
CoCreateGuid
CoTaskMemAlloc
CoCreateInstance
CoUninitialize
CoRevokeClassObject
CoRegisterClassObject
CoInitialize
CoTaskMemRealloc
oleaut32
VarUI4FromStr
SysStringLen
SysAllocStringLen
RegisterTypeLi
UnRegisterTypeLi
SafeArrayGetUBound
SafeArrayCreateVector
SafeArrayAccessData
SafeArrayUnaccessData
SysAllocString
LoadTypeLi
LoadRegTypeLi
SysFreeString
shlwapi
SHCopyKeyW
SHDeleteKeyW
Sections
.text Size: 152KB - Virtual size: 150KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 8KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.erdata Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE