Static task
static1
Behavioral task
behavioral1
Sample
8ae8bc23518d2c2f7efdce5fa0d613edb49cc5f61a13307ceb7d43a507fb0ece.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8ae8bc23518d2c2f7efdce5fa0d613edb49cc5f61a13307ceb7d43a507fb0ece.exe
Resource
win10v2004-20221111-en
General
-
Target
8ae8bc23518d2c2f7efdce5fa0d613edb49cc5f61a13307ceb7d43a507fb0ece
-
Size
92KB
-
MD5
3f3858ce797f9eb5d4a49d330ad6b641
-
SHA1
8f45dcab8d6a1db4b77bde3a9e70a8d0e0b4c5e7
-
SHA256
8ae8bc23518d2c2f7efdce5fa0d613edb49cc5f61a13307ceb7d43a507fb0ece
-
SHA512
c616df61a4bc5ef641a81df1a20cd016eec1ecc354fcab662f22871c3915bfce6bbc1dbf6a2969e961a800602b92d8ad28aaf247e7169aecf60bedc4d36854f1
-
SSDEEP
1536:+eqLUuGzWGlGmtdq7WxtTnVxuwNi49iRivjHoaSGD3:cCxtTnVxuoHvjHoaSG
Malware Config
Signatures
Files
-
8ae8bc23518d2c2f7efdce5fa0d613edb49cc5f61a13307ceb7d43a507fb0ece.exe windows x86
e38ab76a675a8b960fd20b7574bc36f1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
SHGetSpecialFolderPathA
wininet
FindNextUrlCacheEntryA
InternetSetOptionA
FindFirstUrlCacheEntryA
InternetGetConnectedState
shlwapi
SHDeleteValueA
PathFileExistsA
SHSetValueA
SHGetValueA
user32
GetSystemMetrics
GetWindowTextA
SetWindowTextA
BringWindowToTop
SetActiveWindow
AttachThreadInput
SetForegroundWindow
SetWindowPos
SetFocus
GetForegroundWindow
GetCursorPos
GetWindowThreadProcessId
CharToOemA
advapi32
RegSetValueExA
RegCloseKey
RegOpenKeyA
msvcp60
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV?$allocator@D@1@@Z
?_Split@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
??Mstd@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBDABV?$allocator@D@1@@Z
?_Copy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?_Xlen@std@@YAXXZ
?compare@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEHIIPBDI@Z
?erase@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@II@Z
?max_size@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIXZ
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
?_Xran@std@@YAXXZ
kernel32
GetStartupInfoA
GetModuleHandleA
WideCharToMultiByte
ReleaseMutex
GetVolumeInformationA
GetVersionExA
MultiByteToWideChar
lstrlenA
lstrlenW
CreateMutexA
GetLastError
OpenProcess
TerminateProcess
Module32Next
GetTempFileNameA
Process32First
Process32Next
WaitForSingleObject
CloseHandle
DeleteFileA
CopyFileA
GetTempPathA
CreateProcessA
GetModuleFileNameA
LoadLibraryA
GetProcAddress
FreeLibrary
Sleep
CreateDirectoryA
GetWindowsDirectoryA
CreateToolhelp32Snapshot
Module32First
GetCurrentThreadId
GetSystemTimeAsFileTime
ole32
CoInitialize
CoCreateInstance
CLSIDFromProgID
oleaut32
SafeArrayCreateVector
SafeArrayAccessData
SafeArrayUnaccessData
SafeArrayDestroy
SysStringLen
SysAllocStringLen
SysFreeString
VariantClear
SysAllocString
msvcrt
strtok
strchr
strtol
fgets
fwrite
sscanf
rand
srand
??1type_info@@UAE@XZ
__dllonexit
_onexit
_exit
_XcptFilter
exit
_ltoa
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_strlwr
_strdup
_itoa
atol
strncmp
wcscmp
??1exception@@UAE@XZ
strncpy
_beginthread
time
atoi
fprintf
fscanf
memmove
??2@YAPAXI@Z
fopen
fseek
free
strstr
malloc
__CxxFrameHandler
sprintf
fclose
fread
ftell
Sections
.text Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE