Static task
static1
Behavioral task
behavioral1
Sample
c58ed873fa3ed5ae7c04e80029748e210163b7ba7c14566fd57ec5ce467811d8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c58ed873fa3ed5ae7c04e80029748e210163b7ba7c14566fd57ec5ce467811d8.exe
Resource
win10v2004-20221111-en
General
-
Target
c58ed873fa3ed5ae7c04e80029748e210163b7ba7c14566fd57ec5ce467811d8
-
Size
96KB
-
MD5
f8783611a6395a2159658860e55512da
-
SHA1
05739d25963fa30f51e0d19d8bba0c8f83a76e77
-
SHA256
c58ed873fa3ed5ae7c04e80029748e210163b7ba7c14566fd57ec5ce467811d8
-
SHA512
3418b3cabd72c5f47af731713fe1606ffde93320259f402f095918073b21ffaca4ee2b3ef8d54b89c3ca93504673e91ea8d92e84a2a58c7d4f429f79bbb29153
-
SSDEEP
1536:DdDkLaoodWqHwAzjBmWLb3KAZTop/Jh/fn/JdvTV6vgJM7O8JdlZ:WLaMqQA33LbUv/ffZ6vW8JdlZ
Malware Config
Signatures
Files
-
c58ed873fa3ed5ae7c04e80029748e210163b7ba7c14566fd57ec5ce467811d8.exe windows x86
961585ca7cc6e488aaf62d7bed192ec8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
wininet
InternetCanonicalizeUrlA
DeleteUrlCacheEntry
urlmon
URLDownloadToCacheFileA
comctl32
InitCommonControlsEx
version
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA
shlwapi
PathAddBackslashA
kernel32
Sleep
FreeLibrary
DeleteFileA
WaitForSingleObject
CreateProcessA
CloseHandle
GetFileSize
CreateFileA
GetPrivateProfileStringA
lstrcatA
lstrcpyA
lstrlenA
GetLastError
GetModuleFileNameA
GetWindowsDirectoryA
OutputDebugStringA
GetSystemDirectoryA
WritePrivateProfileStringA
GetVersionExA
GetTickCount
lstrcpynA
GetExitCodeProcess
GetFileAttributesA
CreateMutexA
GlobalFree
GlobalAlloc
GetCurrentProcess
GetEnvironmentVariableA
_lclose
_llseek
_lopen
MultiByteToWideChar
TerminateProcess
Process32Next
GetPriorityClass
GetTimeZoneInformation
Process32First
CreateToolhelp32Snapshot
LoadLibraryA
LockResource
LoadResource
FindResourceA
LocalFree
FormatMessageA
GetOEMCP
GetACP
GetLocaleInfoA
GetCPInfo
GetStringTypeW
GetStringTypeA
VirtualAlloc
SetFilePointer
VirtualQuery
InterlockedExchange
HeapSize
HeapReAlloc
RtlUnwind
InitializeCriticalSection
GetCurrentProcessId
VirtualFree
HeapCreate
HeapDestroy
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
QueryPerformanceCounter
GetSystemInfo
LCMapStringA
LCMapStringW
WideCharToMultiByte
GetProcAddress
FlushFileBuffers
CompareStringA
CompareStringW
OpenProcess
SetEnvironmentVariableA
VirtualProtect
SetStdHandle
GetSystemTimeAsFileTime
ExitProcess
GetModuleHandleA
FileTimeToSystemTime
FileTimeToLocalFileTime
FindFirstFileA
GetStartupInfoA
GetCommandLineA
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
HeapFree
HeapAlloc
TlsAlloc
SetLastError
GetCurrentThreadId
TlsFree
TlsSetValue
TlsGetValue
WriteFile
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
user32
MsgWaitForMultipleObjects
CreateDialogParamA
SetWindowTextA
MoveWindow
SetFocus
SetForegroundWindow
LoadIconA
LoadCursorA
SetCursor
SendMessageA
PeekMessageA
IsDialogMessageA
CharNextA
DispatchMessageA
SetDlgItemTextA
GetDlgItem
EnableWindow
DestroyWindow
GetWindowRect
SystemParametersInfoA
GetSystemMetrics
ExitWindowsEx
LoadStringA
wsprintfA
CharPrevA
MessageBoxA
TranslateMessage
ShowWindow
advapi32
RegCreateKeyExA
RegQueryInfoKeyA
RegEnumValueA
RegCloseKey
AllocateAndInitializeSid
OpenProcessToken
GetTokenInformation
EqualSid
FreeSid
RegOpenKeyExA
RegQueryValueExA
RegOpenKeyA
ole32
CoInitialize
CoCreateInstance
Sections
.text Size: 60KB - Virtual size: 59KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ