Static task
static1
Behavioral task
behavioral1
Sample
48262fd2ffaed3ad1690eba23a984c0ed8c2f55337197a9bf9c98cfbf6189124.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
48262fd2ffaed3ad1690eba23a984c0ed8c2f55337197a9bf9c98cfbf6189124.exe
Resource
win10v2004-20220812-en
General
-
Target
48262fd2ffaed3ad1690eba23a984c0ed8c2f55337197a9bf9c98cfbf6189124
-
Size
260KB
-
MD5
6b2e5af8effa4655103ace55594bcb9d
-
SHA1
762b84a62e85e12316954194b708bf9cdf2f3f80
-
SHA256
48262fd2ffaed3ad1690eba23a984c0ed8c2f55337197a9bf9c98cfbf6189124
-
SHA512
6724b042a523c9fb8f6c00c74c2688b0512b9868e772556f32d0dd30b6bdcc34ac73551b5a2e1d69753d22a8f80dc2a9fd275fc6d623257e061460c95e15fef0
-
SSDEEP
1536:KuclC6xHTAvhEoRLiJkkaHCqxdSA/V3lKgcXj5RN0cjkightpQAv:+C6xzAK0FPK/5RN0cjkJtpQAv
Malware Config
Signatures
Files
-
48262fd2ffaed3ad1690eba23a984c0ed8c2f55337197a9bf9c98cfbf6189124.exe windows x86
a82f2756f36ba9889589d058f1a84aca
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
version
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA
comctl32
InitCommonControlsEx
urlmon
URLDownloadToCacheFileA
wininet
InternetCanonicalizeUrlA
DeleteUrlCacheEntry
InternetSetOptionA
kernel32
GetConsoleMode
GetConsoleCP
DeleteFileA
InterlockedExchange
GetVersion
MultiByteToWideChar
lstrlenA
GetLastError
WriteFile
InterlockedIncrement
WideCharToMultiByte
CreateFileA
SetStdHandle
GetEnvironmentVariableA
CompareStringW
CompareStringA
CloseHandle
GetFileAttributesA
GetFullPathNameA
GetModuleFileNameA
FreeLibrary
SetCurrentDirectoryA
GetProcAddress
LoadLibraryA
GetExitCodeProcess
CreateProcessA
GetSystemDirectoryA
VerifyVersionInfoA
GlobalFree
FindResourceA
LockResource
InterlockedDecrement
LoadResource
VerSetConditionMask
GetSystemInfo
GetCurrentProcess
CreateMutexA
OutputDebugStringA
GetVersionExA
FormatMessageA
LocalFree
GlobalAlloc
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStdHandle
ExitProcess
HeapSize
VirtualFree
HeapCreate
HeapDestroy
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
GetSystemTimeAsFileTime
IsValidCodePage
GetOEMCP
GetCPInfo
GetCurrentThreadId
SetLastError
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
RtlUnwind
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
FlushFileBuffers
SetFilePointer
InitializeCriticalSection
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
Sleep
GetACP
GetLocaleInfoA
GetThreadLocale
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapReAlloc
HeapAlloc
VirtualAlloc
GetModuleHandleA
HeapFree
GetCommandLineA
GetProcessHeap
GetStartupInfoA
RaiseException
user32
CharNextA
MsgWaitForMultipleObjects
SetForegroundWindow
DispatchMessageA
LoadIconA
SystemParametersInfoA
GetSystemMetrics
SetFocus
SetWindowTextA
SendMessageA
SetDlgItemTextA
IsDialogMessageA
MoveWindow
TranslateMessage
PeekMessageA
GetDlgItem
DestroyWindow
SetCursor
GetWindowRect
ShowWindow
CreateDialogParamA
ExitWindowsEx
CharPrevA
MessageBoxA
LoadStringA
LoadCursorA
advapi32
RegCloseKey
FreeSid
AllocateAndInitializeSid
RegOpenKeyExA
RegQueryValueExA
winhttp
WinHttpCloseHandle
WinHttpOpenRequest
WinHttpSendRequest
WinHttpConnect
WinHttpReadData
WinHttpQueryHeaders
WinHttpOpen
WinHttpCrackUrl
WinHttpReceiveResponse
WinHttpSetOption
Sections
.text Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 24KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 8KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ