Static task
static1
Behavioral task
behavioral1
Sample
426b5d304f5c01cb1e8e418a9bc9a37aa4c2154aa4accb478a62b34e8a596ed3.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
426b5d304f5c01cb1e8e418a9bc9a37aa4c2154aa4accb478a62b34e8a596ed3.exe
Resource
win10v2004-20221111-en
General
-
Target
426b5d304f5c01cb1e8e418a9bc9a37aa4c2154aa4accb478a62b34e8a596ed3
-
Size
403KB
-
MD5
e5c46a4f933225504fb1edf221c0eb9b
-
SHA1
252ceb347ef7392529709c51f454fc7523474b56
-
SHA256
426b5d304f5c01cb1e8e418a9bc9a37aa4c2154aa4accb478a62b34e8a596ed3
-
SHA512
44878dd26c3c2f6130d1747f0c9be0ea0cb62a89da985b7c82fd54a99123043d35e8db15a1e8fd668e428442df028f59ccf67f126c254eccb231dd4081754459
-
SSDEEP
6144:LJ/T8GG91telRupLi9eDY3BHoDbDLqUZk8ki6onZau3:+GG91kruFXQWDXHk8su3
Malware Config
Signatures
Files
-
426b5d304f5c01cb1e8e418a9bc9a37aa4c2154aa4accb478a62b34e8a596ed3.exe windows x86
e1b16fda1c41384ce61695c39215e6a2
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
urlmon
URLDownloadToCacheFileA
comctl32
InitCommonControlsEx
shell32
ShellExecuteExA
kernel32
CreateMutexA
OpenMutexA
GetVersionExA
GetVersion
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
GetTempPathA
CreateDirectoryA
GetTempFileNameA
GetEnvironmentVariableA
GetPrivateProfileSectionA
GetModuleHandleA
CopyFileA
MoveFileExA
SetCurrentDirectoryA
GetCurrentDirectoryA
GetCommandLineA
WideCharToMultiByte
LockResource
LoadResource
FindResourceA
InterlockedExchange
InterlockedCompareExchange
TerminateThread
CreateThread
LocalFree
ExitProcess
FormatMessageA
lstrlenA
VirtualAlloc
GetFileAttributesA
VirtualFree
lstrcpyA
lstrcmpA
lstrcatA
GetFullPathNameA
SetFileTime
LocalFileTimeToFileTime
DosDateTimeToFileTime
WriteFile
CreateFileA
SetFileAttributesA
DeleteFileA
ReadFile
SetFilePointer
GetCurrentProcess
GetModuleFileNameA
lstrcmpiA
RtlUnwind
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
HeapFree
GetStartupInfoA
HeapAlloc
GetModuleHandleW
CreateFileW
GetLastError
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
GetCurrentThread
HeapCreate
HeapDestroy
DeleteCriticalSection
LeaveCriticalSection
FatalAppExitA
GetProcessHeap
HeapReAlloc
SetHandleCount
GetStdHandle
GetFileType
GetConsoleCP
GetConsoleMode
FlushFileBuffers
Sleep
HeapSize
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
InitializeCriticalSectionAndSpinCount
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
SetConsoleCtrlHandler
FreeLibrary
LoadLibraryA
LCMapStringA
LCMapStringW
GetTimeZoneInformation
GetLocaleInfoW
CompareStringA
CompareStringW
SetEnvironmentVariableA
InitializeCriticalSection
TlsGetValue
CloseHandle
SetEndOfFile
GetProcAddress
EnterCriticalSection
user32
SystemParametersInfoA
GetWindowRect
SetDlgItemTextA
DestroyWindow
SetForegroundWindow
ShowWindow
MoveWindow
SetWindowTextA
KillTimer
DispatchMessageA
TranslateMessage
GetSystemMetrics
SetTimer
IsDialogMessageA
PeekMessageA
SetWindowLongA
CreateDialogParamA
wsprintfA
GetDlgItem
SendMessageA
MessageBoxIndirectW
LoadStringA
MessageBoxA
GetMessageA
PostMessageA
advapi32
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegCloseKey
Sections
.text Size: 241KB - Virtual size: 240KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 33KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 106KB - Virtual size: 105KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ