Static task
static1
Behavioral task
behavioral1
Sample
2503f9fca97fbc38e74ca4953949d2d44ebf3d30d6bfa424efb894d217435953.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
2503f9fca97fbc38e74ca4953949d2d44ebf3d30d6bfa424efb894d217435953.exe
Resource
win10v2004-20220901-en
General
-
Target
2503f9fca97fbc38e74ca4953949d2d44ebf3d30d6bfa424efb894d217435953
-
Size
304KB
-
MD5
e04f1c1e2b7730f0d6524747415bd2fc
-
SHA1
bae4a7316b350dd3ee33a331db99d12d8f0bda9b
-
SHA256
2503f9fca97fbc38e74ca4953949d2d44ebf3d30d6bfa424efb894d217435953
-
SHA512
3c6fe676cdb079264d95cfcdada6d53c2c3d17f5cb3094d433d6e8d3e7806dbc39f1815dbbe284d5eb1d9e00942ba5af544edb459411e69ada947a47ca4424e9
-
SSDEEP
6144:11WYjX9W4yu7hZC/zu+BLy2Go+J8RBpqWTBzG+V72:11FQ4yudZQu+Bm4+J89qWTVR2
Malware Config
Signatures
Files
-
2503f9fca97fbc38e74ca4953949d2d44ebf3d30d6bfa424efb894d217435953.exe windows x86
9c4ee090b711f5cb151778a1da927074
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetFileAttributesW
SetFileAttributesA
WideCharToMultiByte
MultiByteToWideChar
GetModuleFileNameW
GetTempPathW
GetSystemDirectoryW
GetWindowsDirectoryW
Sleep
WinExec
SetCurrentDirectoryW
TerminateProcess
GetCurrentProcess
SetLocaleInfoW
CreateFileW
WriteFile
GetLastError
CompareStringA
GetProcessHeap
SetEndOfFile
CreateFileA
GetLocaleInfoW
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
InitializeCriticalSectionAndSpinCount
LoadLibraryA
GetModuleHandleA
GetCurrentProcessId
QueryPerformanceCounter
GetCommandLineW
GetEnvironmentStringsW
GetLocalTime
GetTickCount
DeleteFileW
GetFileAttributesW
WaitForSingleObject
SetEvent
CreateEventW
CloseHandle
FreeEnvironmentStringsW
GetModuleFileNameA
CompareStringW
HeapSize
FlushFileBuffers
SetFilePointer
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
HeapReAlloc
VirtualAlloc
VirtualFree
HeapCreate
GetStringTypeA
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
InterlockedIncrement
InterlockedDecrement
InterlockedCompareExchange
InterlockedExchange
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitThread
GetCurrentThreadId
CreateThread
GetSystemTimeAsFileTime
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapFree
GetCPInfo
GetStartupInfoW
HeapAlloc
ReadFile
RaiseException
RtlUnwind
LCMapStringA
LCMapStringW
GetStringTypeW
GetModuleHandleW
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
ExitProcess
GetTimeZoneInformation
GetConsoleCP
GetConsoleMode
GetACP
GetOEMCP
IsValidCodePage
GetUserDefaultLCID
SetEnvironmentVariableA
user32
LoadIconW
LoadCursorW
LoadStringW
RegisterClassExW
PostQuitMessage
EndPaint
BeginPaint
DefWindowProcW
DestroyWindow
advapi32
RegSetValueExW
RegQueryValueExW
RegCloseKey
RegOpenKeyExW
shell32
SHCreateDirectoryExW
oleaut32
SystemTimeToVariantTime
VariantTimeToSystemTime
VarUdateFromDate
wininet
InternetCrackUrlW
HttpQueryInfoW
InternetSetStatusCallbackW
InternetCloseHandle
InternetGetConnectedState
InternetOpenW
InternetConnectW
HttpOpenRequestW
HttpSendRequestW
InternetReadFile
Sections
.text Size: 227KB - Virtual size: 227KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 43KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ