Static task
static1
Behavioral task
behavioral1
Sample
94babd2017dc0763835e56c0b8a520360520be7ba34edd81873c9fa9080374bf.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
94babd2017dc0763835e56c0b8a520360520be7ba34edd81873c9fa9080374bf.exe
Resource
win10v2004-20220812-en
General
-
Target
94babd2017dc0763835e56c0b8a520360520be7ba34edd81873c9fa9080374bf
-
Size
563KB
-
MD5
b7247118e9ff6092d6d7a29e949e8ee8
-
SHA1
f51618d06db862a5b5085ac9351afbdb4efe241a
-
SHA256
94babd2017dc0763835e56c0b8a520360520be7ba34edd81873c9fa9080374bf
-
SHA512
442579204b9c0eb2653213aacf2f46bb27fa6c5840b2fbf175af7a0fb37b17af340ce2345593318706554e4c556895f2245a3b26f1d51659c06bbe6c86ed412c
-
SSDEEP
12288:Nrd1HO/VNMQL3eMiL8PaAyOP8n0ko9PTMs2m4mIS80AGmy5q9/B:NXO9HL3ehL8PaAyOPI0koRDj/7mjb
Malware Config
Signatures
Files
-
94babd2017dc0763835e56c0b8a520360520be7ba34edd81873c9fa9080374bf.exe windows x86
19da42a95d2fcde618f14c9d47c80e6f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
wininet
InternetCloseHandle
FtpCommandA
InternetSetCookieW
DetectAutoProxyUrl
SetUrlCacheConfigInfoA
InternetAutodial
InternetSecurityProtocolToStringA
GetUrlCacheConfigInfoA
RunOnceUrlCache
FtpGetFileEx
InternetDial
SetUrlCacheEntryInfoA
InternetTimeFromSystemTime
InternetCrackUrlW
HttpCheckDavCompliance
InternetCombineUrlW
RetrieveUrlCacheEntryFileA
SetUrlCacheGroupAttributeA
FtpRemoveDirectoryW
CreateUrlCacheContainerW
HttpAddRequestHeadersW
InternetErrorDlg
InternetQueryDataAvailable
FtpSetCurrentDirectoryW
InternetReadFileExW
InternetGetConnectedStateExA
InternetGetLastResponseInfoW
InternetSecurityProtocolToStringW
IsUrlCacheEntryExpiredW
UnlockUrlCacheEntryFileW
InternetSetDialStateA
FindNextUrlCacheEntryA
HttpOpenRequestW
FtpGetFileSize
FtpGetCurrentDirectoryW
SetUrlCacheEntryInfoW
GetUrlCacheEntryInfoA
GetUrlCacheEntryInfoExW
DeleteUrlCacheContainerW
GopherFindFirstFileA
InternetCreateUrlA
InternetCheckConnectionW
FindNextUrlCacheEntryExA
InternetGoOnline
RetrieveUrlCacheEntryStreamW
DeleteUrlCacheEntryW
GopherGetLocatorTypeA
InternetQueryOptionA
InternetConfirmZoneCrossingA
InternetGetConnectedStateEx
HttpSendRequestExW
FtpGetFileA
InternetUnlockRequestFile
FtpCommandW
FindFirstUrlCacheEntryExA
InternetOpenUrlA
InternetOpenUrlW
DeleteUrlCacheEntryA
InternetDialW
CreateUrlCacheContainerA
FtpOpenFileA
InternetShowSecurityInfoByURL
InternetSetOptionExW
FtpDeleteFileA
GopherGetAttributeW
SetUrlCacheEntryGroupW
GetUrlCacheGroupAttributeA
InternetCreateUrlW
InternetSetCookieA
HttpSendRequestExA
InternetAlgIdToStringW
ShowClientAuthCerts
CreateUrlCacheEntryW
UnlockUrlCacheEntryFileA
InternetQueryFortezzaStatus
FtpGetCurrentDirectoryA
GopherFindFirstFileW
GetUrlCacheEntryInfoExA
FtpOpenFileW
FindNextUrlCacheContainerW
HttpQueryInfoW
FtpRemoveDirectoryA
InternetOpenA
FreeUrlCacheSpaceA
DeleteUrlCacheContainerA
FindNextUrlCacheEntryExW
InternetConfirmZoneCrossing
HttpSendRequestA
HttpAddRequestHeadersA
InternetAlgIdToStringA
InternetSetFilePointer
UrlZonesDetach
GopherGetAttributeA
InternetOpenW
ShowCertificate
FtpGetFileW
GopherOpenFileW
ReadUrlCacheEntryStream
InternetWriteFileExW
InternetAutodialHangup
FtpFindFirstFileA
DeleteIE3Cache
InternetTimeToSystemTimeW
InternetCrackUrlA
InternetGoOnlineA
FindFirstUrlCacheEntryW
InternetSetOptionW
FindNextUrlCacheContainerA
InternetGetCertByURLA
InternetQueryOptionW
InternetGetCertByURL
FtpPutFileA
FindFirstUrlCacheGroup
ShowSecurityInfo
CommitUrlCacheEntryW
FtpPutFileW
FindFirstUrlCacheEntryA
InternetReadFileExA
InternetGetCookieA
SetUrlCacheHeaderData
InternetShowSecurityInfoByURLA
FtpRenameFileA
FindFirstUrlCacheContainerW
IsUrlCacheEntryExpiredA
FtpSetCurrentDirectoryA
GopherCreateLocatorW
FtpCreateDirectoryW
FindNextUrlCacheGroup
IsHostInProxyBypassList
InternetGoOnlineW
InternetCheckConnectionA
HttpEndRequestW
InternetHangUp
ResumeSuspendedDownload
GopherGetLocatorTypeW
InternetInitializeAutoProxyDll
FtpDeleteFileW
InternetConnectW
GetUrlCacheHeaderData
GetUrlCacheGroupAttributeW
HttpEndRequestA
InternetGetConnectedStateExW
InternetSetDialStateW
InternetSetOptionExA
gdi32
CancelDC
ColorMatchToTarget
SetROP2
EnumObjects
CloseEnhMetaFile
AbortDoc
SetPixelFormat
Arc
CreateRoundRectRgn
CloseFigure
GdiPlayJournal
GetColorSpace
DeleteEnhMetaFile
EnumICMProfilesW
GetOutlineTextMetricsW
ResetDCA
SetBrushOrgEx
FillRgn
GetTextExtentExPointW
SetMapperFlags
CreateBitmapIndirect
GetWinMetaFileBits
Pie
StartDocA
GetBitmapDimensionEx
CheckColorsInGamut
PolyPolygon
SetViewportOrgEx
GetTextMetricsW
StretchBlt
SetMapMode
PathToRegion
GetWindowExtEx
SetGraphicsMode
CreateColorSpaceA
DeviceCapabilitiesExA
GetTextExtentPointA
MaskBlt
GetDeviceCaps
CreatePen
GdiPlayScript
SetLayout
GetColorAdjustment
CreateFontW
GetRgnBox
GetCharWidthA
PolyBezierTo
EnumFontFamiliesW
CreateEllipticRgnIndirect
CloseMetaFile
FloodFill
ColorCorrectPalette
GetBkMode
GetTextCharset
GetMetaFileW
ResetDCW
GetBkColor
ScaleViewportExtEx
GetObjectA
GetCharWidthW
CreateDIBSection
GetCharABCWidthsA
GetWorldTransform
GetObjectW
FixBrushOrgEx
GetTextColor
SetColorAdjustment
GdiPlayDCScript
SetICMProfileW
ExcludeClipRect
MoveToEx
DescribePixelFormat
BitBlt
CreateMetaFileW
gdiPlaySpoolStream
GetMiterLimit
ExtEscape
GetKerningPairsA
Sections
.text Size: 274KB - Virtual size: 273KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 288KB - Virtual size: 288KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE