Static task
static1
Behavioral task
behavioral1
Sample
ed9e895f3d7897c0ace28b541cf1d048e37a38162a649be26d0fdd4063ac30f8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
ed9e895f3d7897c0ace28b541cf1d048e37a38162a649be26d0fdd4063ac30f8.exe
Resource
win10v2004-20221111-en
General
-
Target
ed9e895f3d7897c0ace28b541cf1d048e37a38162a649be26d0fdd4063ac30f8
-
Size
90KB
-
MD5
789b4cb68bc2798e80741709b080157c
-
SHA1
7e747cc0db728f26d4e81f8bf44a2ad17b103dad
-
SHA256
ed9e895f3d7897c0ace28b541cf1d048e37a38162a649be26d0fdd4063ac30f8
-
SHA512
6415c467cf7ba2edfd5a9c9ef7700931afbe5c62f3d820a41b283e4088ffe86acd10aef85c6a438e0f3dbb22e8ff8590dda23cd93b5f59b69c6b9c890c25cbf3
-
SSDEEP
1536:krSKvhlYiOhUlcvPz3th5TNSk9C4xk5oyJoB+eVgcv:6SKZfcz3DQck5o0oBLlv
Malware Config
Signatures
Files
-
ed9e895f3d7897c0ace28b541cf1d048e37a38162a649be26d0fdd4063ac30f8.exe windows x86
cd34391435e1104ff4263a0c48b8202e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LeaveCriticalSection
GetCurrentThreadId
EnterCriticalSection
HeapDestroy
DeleteCriticalSection
CreateMutexA
InitializeCriticalSection
FlushInstructionCache
GetCurrentProcess
GetCurrentDirectoryA
GetTempPathA
ResumeThread
SetThreadPriority
CreateThread
TerminateThread
WinExec
FileTimeToSystemTime
GetFileTime
CreateFileA
CreateProcessA
GetSystemTime
SetEndOfFile
LoadLibraryA
LCMapStringW
LCMapStringA
InterlockedIncrement
InterlockedDecrement
IsBadCodePtr
IsBadReadPtr
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
WaitForSingleObject
FlushFileBuffers
SetStdHandle
SetUnhandledExceptionFilter
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetOEMCP
GetACP
GetCPInfo
ReadFile
GetProcAddress
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
GetVersionExA
GetEnvironmentVariableA
GetModuleFileNameA
CloseHandle
HeapSize
TerminateProcess
TlsGetValue
SetLastError
TlsAlloc
TlsSetValue
WriteFile
RaiseException
ExitProcess
GetVersion
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
GetFileAttributesA
CreateDirectoryA
DeleteFileA
MoveFileA
HeapAlloc
HeapReAlloc
SetFilePointer
GetLastError
RtlUnwind
HeapFree
user32
GetClientRect
SystemParametersInfoA
EndDialog
DispatchMessageA
TranslateMessage
GetMessageA
MapWindowPoints
ShowWindow
CreateDialogParamA
DestroyWindow
DefWindowProcA
GetWindowRect
GetWindow
SetWindowPos
GetParent
PeekMessageA
PostQuitMessage
LoadMenuA
SetMenuDefaultItem
GetCursorPos
TrackPopupMenu
GetMenuItemID
LoadIconA
DestroyMenu
IsMenu
GetSubMenu
EnableMenuItem
IsIconic
IsWindowVisible
MessageBoxA
LoadStringA
SetForegroundWindow
EnumWindows
EnableWindow
GetActiveWindow
DialogBoxParamA
GetSystemMetrics
LoadImageA
SendMessageA
GetDlgItem
SetWindowTextA
IsDialogMessageA
GetClassNameA
GetWindowTextA
PostMessageA
SetWindowLongA
GetWindowLongA
advapi32
RegOpenKeyA
RegCreateKeyA
RegQueryValueExA
RegSetValueExA
RegCloseKey
shell32
SHGetSpecialFolderPathA
Shell_NotifyIconA
ShellExecuteA
ole32
CoInitialize
CoUninitialize
wininet
InternetOpenA
InternetCloseHandle
InternetReadFile
HttpQueryInfoA
HttpSendRequestA
HttpAddRequestHeadersA
HttpOpenRequestA
InternetConnectA
iphlpapi
GetAdaptersInfo
ws2_32
inet_addr
winmm
timeGetTime
comctl32
InitCommonControlsEx
Sections
.text Size: 60KB - Virtual size: 56KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 48KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ