Static task
static1
Behavioral task
behavioral1
Sample
d58cf72e5da222c407913ae8bfcde1f6f6b9dea95249ea5f835474464a3d3d44.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d58cf72e5da222c407913ae8bfcde1f6f6b9dea95249ea5f835474464a3d3d44.exe
Resource
win10v2004-20221111-en
General
-
Target
d58cf72e5da222c407913ae8bfcde1f6f6b9dea95249ea5f835474464a3d3d44
-
Size
285KB
-
MD5
33a14269f3fa62111b5ea0fbc8ff9a6b
-
SHA1
5b280228559c583be3b9d02ec0a0e29b0778e613
-
SHA256
d58cf72e5da222c407913ae8bfcde1f6f6b9dea95249ea5f835474464a3d3d44
-
SHA512
96dfab0bfca643667b945f55cae02cf8e0e10e9c43aa8dd8507a9dcb3a7c73891472f5888e22d26e0e249d10a4baeb0b86d41035a8d56083d356df7e80675d37
-
SSDEEP
3072:+nK9c57rl6V572vudwITzJXU5OuV+2Y1o4qgH4efICIBN4VRpJrHhFCC+Bz:+K986V57cudwITzpZTunCyNkRzOC+B
Malware Config
Signatures
Files
-
d58cf72e5da222c407913ae8bfcde1f6f6b9dea95249ea5f835474464a3d3d44.exe windows x86
36efd3279f9c15106927455239c91680
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
wininet
InternetCloseHandle
InternetReadFile
HttpSendRequestA
HttpAddRequestHeadersA
HttpOpenRequestA
InternetConnectA
InternetOpenA
InternetSetCookieA
kernel32
ExitProcess
CompareStringW
GetProcessHeap
SetEndOfFile
CreateFileW
CreateFileA
SetStdHandle
WriteConsoleW
HeapReAlloc
GetModuleFileNameA
GetShortPathNameA
lstrcpyA
lstrcatA
GetEnvironmentVariableA
FindFirstFileA
FindNextFileA
FindClose
ExpandEnvironmentStringsA
GetVersionExA
CreateToolhelp32Snapshot
Process32First
Process32Next
CloseHandle
GetSystemTime
SystemTimeToFileTime
GetProcAddress
GetModuleHandleA
GetCurrentProcess
SetDllDirectoryA
LoadLibraryA
CopyFileA
FreeLibrary
DeleteFileA
OpenProcess
GetSystemInfo
VirtualQueryEx
ReadProcessMemory
Sleep
OpenMutexA
CreateMutexA
IsValidLocale
EnumSystemLocalesA
InterlockedIncrement
InterlockedDecrement
WideCharToMultiByte
InterlockedCompareExchange
InterlockedExchange
MultiByteToWideChar
GetStringTypeW
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
EncodePointer
DecodePointer
GetLastError
HeapFree
GetSystemTimeAsFileTime
GetModuleHandleW
SetEnvironmentVariableA
HeapAlloc
GetCommandLineA
HeapSetInformation
RtlUnwind
LCMapStringW
GetCPInfo
RaiseException
HeapCreate
IsProcessorFeaturePresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
GetTimeZoneInformation
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
GetACP
GetOEMCP
IsValidCodePage
LoadLibraryW
GetLocaleInfoW
WriteFile
GetModuleFileNameW
GetConsoleCP
GetConsoleMode
SetFilePointer
ReadFile
FlushFileBuffers
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
HeapSize
GetUserDefaultLCID
GetLocaleInfoA
shell32
ShellExecuteA
Sections
.text Size: 155KB - Virtual size: 154KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 107KB - Virtual size: 107KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ