Static task
static1
Behavioral task
behavioral1
Sample
c8092dabc457ba66c9953efce89a4f1f241d81b13509fee15e74c4b3d7e32b24.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c8092dabc457ba66c9953efce89a4f1f241d81b13509fee15e74c4b3d7e32b24.exe
Resource
win10v2004-20220812-en
General
-
Target
c8092dabc457ba66c9953efce89a4f1f241d81b13509fee15e74c4b3d7e32b24
-
Size
96KB
-
MD5
7ba6924b8a0d27479a18999954b2a2f6
-
SHA1
289a0a2849ddf942c940d6665d6794a40cc91c24
-
SHA256
c8092dabc457ba66c9953efce89a4f1f241d81b13509fee15e74c4b3d7e32b24
-
SHA512
0617b01de01c9995879dc07cc9bed9c7d0276b6b83c94d99445204dbe0a622aa49d5c9e7998b2b0fd5b8149f9c80483b23f6584ad75397329bea7dbfe5cce894
-
SSDEEP
1536:AdDkLaoodWqHwAzjBmWLb3KAZTop/Jh/fn/JdvTV6vgJM7O8JdlZ:zLaMqQA33LbUv/ffZ6vW8JdlZ
Malware Config
Signatures
Files
-
c8092dabc457ba66c9953efce89a4f1f241d81b13509fee15e74c4b3d7e32b24.exe windows x86
961585ca7cc6e488aaf62d7bed192ec8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
wininet
InternetCanonicalizeUrlA
DeleteUrlCacheEntry
urlmon
URLDownloadToCacheFileA
comctl32
InitCommonControlsEx
version
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA
shlwapi
PathAddBackslashA
kernel32
Sleep
FreeLibrary
DeleteFileA
WaitForSingleObject
CreateProcessA
CloseHandle
GetFileSize
CreateFileA
GetPrivateProfileStringA
lstrcatA
lstrcpyA
lstrlenA
GetLastError
GetModuleFileNameA
GetWindowsDirectoryA
OutputDebugStringA
GetSystemDirectoryA
WritePrivateProfileStringA
GetVersionExA
GetTickCount
lstrcpynA
GetExitCodeProcess
GetFileAttributesA
CreateMutexA
GlobalFree
GlobalAlloc
GetCurrentProcess
GetEnvironmentVariableA
_lclose
_llseek
_lopen
MultiByteToWideChar
TerminateProcess
Process32Next
GetPriorityClass
GetTimeZoneInformation
Process32First
CreateToolhelp32Snapshot
LoadLibraryA
LockResource
LoadResource
FindResourceA
LocalFree
FormatMessageA
GetOEMCP
GetACP
GetLocaleInfoA
GetCPInfo
GetStringTypeW
GetStringTypeA
VirtualAlloc
SetFilePointer
VirtualQuery
InterlockedExchange
HeapSize
HeapReAlloc
RtlUnwind
InitializeCriticalSection
GetCurrentProcessId
VirtualFree
HeapCreate
HeapDestroy
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
QueryPerformanceCounter
GetSystemInfo
LCMapStringA
LCMapStringW
WideCharToMultiByte
GetProcAddress
FlushFileBuffers
CompareStringA
CompareStringW
OpenProcess
SetEnvironmentVariableA
VirtualProtect
SetStdHandle
GetSystemTimeAsFileTime
ExitProcess
GetModuleHandleA
FileTimeToSystemTime
FileTimeToLocalFileTime
FindFirstFileA
GetStartupInfoA
GetCommandLineA
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
HeapFree
HeapAlloc
TlsAlloc
SetLastError
GetCurrentThreadId
TlsFree
TlsSetValue
TlsGetValue
WriteFile
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
user32
MsgWaitForMultipleObjects
CreateDialogParamA
SetWindowTextA
MoveWindow
SetFocus
SetForegroundWindow
LoadIconA
LoadCursorA
SetCursor
SendMessageA
PeekMessageA
IsDialogMessageA
CharNextA
DispatchMessageA
SetDlgItemTextA
GetDlgItem
EnableWindow
DestroyWindow
GetWindowRect
SystemParametersInfoA
GetSystemMetrics
ExitWindowsEx
LoadStringA
wsprintfA
CharPrevA
MessageBoxA
TranslateMessage
ShowWindow
advapi32
RegCreateKeyExA
RegQueryInfoKeyA
RegEnumValueA
RegCloseKey
AllocateAndInitializeSid
OpenProcessToken
GetTokenInformation
EqualSid
FreeSid
RegOpenKeyExA
RegQueryValueExA
RegOpenKeyA
ole32
CoInitialize
CoCreateInstance
Sections
.text Size: 60KB - Virtual size: 59KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ