Static task
static1
Behavioral task
behavioral1
Sample
5952d681c7e936a32656cc8d12ee4e4e0ce0b489a9e872b8f238acfd38fe2830.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
5952d681c7e936a32656cc8d12ee4e4e0ce0b489a9e872b8f238acfd38fe2830.exe
Resource
win10v2004-20220901-en
General
-
Target
5952d681c7e936a32656cc8d12ee4e4e0ce0b489a9e872b8f238acfd38fe2830
-
Size
349KB
-
MD5
2e5c7e05f4d80e2305b1a68977345390
-
SHA1
e1adfe5cf25e1eed041803165f46a03af446ff0d
-
SHA256
5952d681c7e936a32656cc8d12ee4e4e0ce0b489a9e872b8f238acfd38fe2830
-
SHA512
52f11d826bad2e52e0888f77c431646c86168d13ec97ecaa60cdda603f6c3b5be251e37ff3c5f7cf93ac9630deada1f2b4f48ec347f97da69a3c7370561e28ee
-
SSDEEP
6144:jhBu3tH/qyhsbuR1TAnC0BxoUhSluCp3QmxsVDuWDB16wXSwRfk+fWy8E+EMr:l0xCyLR1MnCs3qp3fKVDuWd1zf1WTEU
Malware Config
Signatures
Files
-
5952d681c7e936a32656cc8d12ee4e4e0ce0b489a9e872b8f238acfd38fe2830.exe windows x86
48ec3ddc05be64ce1b5178a422e66d28
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
wininet
InternetCrackUrlA
InternetCanonicalizeUrlA
kernel32
SetHandleCount
lstrcmpiA
VirtualQuery
FindFirstFileA
GetUserDefaultLCID
lstrlenA
VirtualAlloc
VirtualProtect
GetLocalTime
GetCurrentDirectoryA
TerminateThread
HeapAlloc
DeleteCriticalSection
ResetEvent
SetUnhandledExceptionFilter
LocalFree
TlsFree
LCMapStringW
GetSystemTimeAsFileTime
ReadFile
GetSystemInfo
GetModuleHandleA
GetFileSize
IsValidCodePage
DeleteFileA
ReleaseMutex
CloseHandle
CreateFileA
ProcessIdToSessionId
GetShortPathNameA
MoveFileA
GetThreadLocale
RemoveDirectoryA
IsValidLocale
FreeEnvironmentStringsA
SetFilePointer
HeapFree
WaitForSingleObject
CreateMutexA
RaiseException
lstrcpynA
IsBadCodePtr
EnterCriticalSection
SetStdHandle
FlushFileBuffers
GetTimeZoneInformation
MoveFileExA
GetPrivateProfileIntA
LoadLibraryExA
CreateEventA
TlsGetValue
CopyFileA
SetThreadPriority
lstrlenW
GetWindowsDirectoryA
VirtualFree
WriteFile
GetStdHandle
GetOEMCP
SetFileAttributesA
TlsSetValue
OutputDebugStringA
GetACP
FreeLibrary
HeapSize
SetEndOfFile
LeaveCriticalSection
TlsAlloc
FileTimeToSystemTime
CompareStringA
WideCharToMultiByte
UnhandledExceptionFilter
GetPrivateProfileStringA
HeapReAlloc
GetCurrentThreadId
CompareFileTime
CopyFileExA
SetEnvironmentVariableA
SetLastError
FindNextFileA
OpenProcess
LCMapStringA
SystemTimeToFileTime
GetFileType
GetSystemDirectoryA
RtlUnwind
GetCommandLineA
CompareStringW
EnumSystemLocalesA
CreateThread
FormatMessageA
CreateDirectoryA
GetDiskFreeSpaceExA
FindClose
GetThreadPriority
FreeEnvironmentStringsW
HeapDestroy
oleaut32
SysAllocStringByteLen
SysFreeString
VariantClear
SysAllocString
version
GetFileVersionInfoSizeA
VerQueryValueA
GetFileVersionInfoA
user32
CharPrevA
PostMessageA
FindWindowExA
GetSystemMetrics
MessageBoxA
CharUpperA
ole32
CoCreateInstance
CoInitialize
CoUninitialize
CoInitializeEx
shlwapi
PathRemoveFileSpecA
PathFileExistsA
advapi32
RegOpenKeyExA
AdjustTokenPrivileges
ImpersonateLoggedOnUser
OpenProcessToken
RegOpenKeyExW
GetTokenInformation
SetTokenInformation
IsTextUnicode
RevertToSelf
InitializeSecurityDescriptor
RegQueryValueExW
RegCloseKey
LookupPrivilegeValueA
DuplicateTokenEx
RegQueryValueExA
SetSecurityDescriptorDacl
iphlpapi
GetAdaptersInfo
GetTcpTable
GetUdpTable
GetNumberOfInterfaces
GetFriendlyIfIndex
GetPerAdapterInfo
GetIpAddrTable
UnenableRouter
GetIpStatistics
Icmp6CreateFile
IcmpCloseHandle
GetNetworkParams
inseng
GetICifFileFromFile
DllGetClassObject
Sections
.text Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 319KB - Virtual size: 536KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ