Static task
static1
Behavioral task
behavioral1
Sample
d4bf3a4c94d49aecfe7c823724df4e3325b28806b7ec0958be313b798fe6ee1a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d4bf3a4c94d49aecfe7c823724df4e3325b28806b7ec0958be313b798fe6ee1a.exe
Resource
win10v2004-20220812-en
General
-
Target
d4bf3a4c94d49aecfe7c823724df4e3325b28806b7ec0958be313b798fe6ee1a
-
Size
440KB
-
MD5
82f5beba1b829d9f73e52f85d8a914bc
-
SHA1
63c55b4e30b35ddb5dbfdfc424a90421cdc0750b
-
SHA256
d4bf3a4c94d49aecfe7c823724df4e3325b28806b7ec0958be313b798fe6ee1a
-
SHA512
bffcd14cc23e3cd61fa3658296d0330d171d40cf73c9192931dd9790e80c592ea8b19d09e50cf1bc4d444814cdffd9f1e7f5a437730ff9fecaa92f8b29325fc3
-
SSDEEP
12288:Tjo0cjF6KoYx/io28j1LX6fXgTVpq5mBzb5N9:TjoXFroYV28jB64505Kn5N9
Malware Config
Signatures
Files
-
d4bf3a4c94d49aecfe7c823724df4e3325b28806b7ec0958be313b798fe6ee1a.exe windows x86
13f2004aa48bdcc600f49517395ef857
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
OutputDebugStringA
GetCurrentProcess
WideCharToMultiByte
MultiByteToWideChar
SetLastError
GetLastError
CopyFileW
CreateFileW
GetProcAddress
ReadFile
WriteFile
SetEndOfFile
SetFilePointer
FlushFileBuffers
ResetEvent
GetVersionExW
GetSystemInfo
LoadResource
FreeResource
GetEnvironmentStringsW
FreeEnvironmentStringsW
LoadLibraryW
FreeLibrary
FormatMessageW
LockResource
FindResourceW
ExitProcess
QueryPerformanceCounter
GetModuleFileNameW
DeleteCriticalSection
InitializeCriticalSection
CreateEventW
CreateMutexW
WaitForSingleObject
HeapSize
HeapAlloc
GetStdHandle
HeapCreate
HeapFree
GetCurrentProcessId
LeaveCriticalSection
VirtualQuery
GetCurrentThread
LocalAlloc
LocalFree
TlsAlloc
TlsFree
TlsSetValue
SleepEx
RaiseException
SetEvent
SetThreadPriority
QueueUserAPC
SetPriorityClass
GetConsoleWindow
SetCommTimeouts
SizeofResource
GetProcessHeap
CreateFileA
SetEnvironmentVariableA
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetTickCount
GetModuleFileNameA
WriteConsoleW
GetStartupInfoW
SetHandleCount
IsValidCodePage
GetOEMCP
GetACP
TerminateProcess
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsProcessorFeaturePresent
LCMapStringW
CompareStringW
GetCPInfo
HeapSetInformation
GetCommandLineA
GetConsoleMode
GetConsoleCP
CreateThread
ExitThread
GetFileType
InitializeCriticalSectionAndSpinCount
SetStdHandle
SetConsoleCtrlHandler
GetDateFormatA
GetTimeFormatA
HeapReAlloc
RtlUnwind
GetLocaleInfoW
DecodePointer
EncodePointer
EnterCriticalSection
TlsGetValue
GetCurrentThreadId
CloseHandle
GetCommandLineW
GetModuleHandleW
GetTimeZoneInformation
QueryPerformanceFrequency
FileTimeToLocalFileTime
SystemTimeToFileTime
InterlockedCompareExchange
GetSystemTimeAsFileTime
Sleep
InterlockedExchange
GetStringTypeW
InterlockedDecrement
InterlockedIncrement
LoadLibraryA
user32
ShowWindow
wsprintfW
CharToOemA
ws2_32
getservbyname
ntohl
ntohs
wininet
InternetReadFile
HttpEndRequestW
InternetCrackUrlW
InternetConnectW
InternetOpenW
HttpSendRequestExW
InternetWriteFile
HttpOpenRequestW
HttpQueryInfoW
InternetSetOptionW
InternetCloseHandle
shell32
SHGetFolderPathW
advapi32
RegEnumValueW
RegQueryInfoKeyW
RegSetValueExW
RegCreateKeyExW
RegCloseKey
version
GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW
Sections
.text Size: 339KB - Virtual size: 338KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 61KB - Virtual size: 61KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 696B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ