Static task
static1
Behavioral task
behavioral1
Sample
c8e45877ceac01ab0245a8597739d73f97db7cce16f04ab2ef6b805ebee1983b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c8e45877ceac01ab0245a8597739d73f97db7cce16f04ab2ef6b805ebee1983b.exe
Resource
win10v2004-20220901-en
General
-
Target
c8e45877ceac01ab0245a8597739d73f97db7cce16f04ab2ef6b805ebee1983b
-
Size
583KB
-
MD5
9a5fe04ab3f9c113d31dba7c49e7050c
-
SHA1
75c7375c09b50abeb7a7c3c36c605b0d4be140b2
-
SHA256
c8e45877ceac01ab0245a8597739d73f97db7cce16f04ab2ef6b805ebee1983b
-
SHA512
a1277f16aaf6dc423bf8a609cb9517867041ff991b1dfcd0362bb623cf359b8ab588273c04b5b3ec1f479b329b734cbef954bbedb58f8de67b1716f81cc0ed18
-
SSDEEP
12288:eaaRl3tYDq3jSr1nG631p9KoRLzHsaLSrfmCyUyQcAFKpy1itYnINgMj7rrVtSLh:RWlKejknj1p9/FLsuBbpy1itYnINgMjo
Malware Config
Signatures
Files
-
c8e45877ceac01ab0245a8597739d73f97db7cce16f04ab2ef6b805ebee1983b.exe windows x86
5049bdb7c0f2db9defa0078c824525ba
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
wininet
InternetSetDialState
GopherGetLocatorTypeW
FindNextUrlCacheContainerA
RetrieveUrlCacheEntryFileA
FindNextUrlCacheEntryW
InternetWriteFileExA
SetUrlCacheEntryInfoW
comctl32
ImageList_AddIcon
ImageList_SetIconSize
ImageList_DrawIndirect
ImageList_SetDragCursorImage
_TrackMouseEvent
ImageList_AddMasked
DrawStatusTextA
ImageList_SetImageCount
ImageList_GetBkColor
DrawInsert
ImageList_SetBkColor
ImageList_Draw
ImageList_Read
InitCommonControlsEx
DrawStatusText
ImageList_Copy
ImageList_GetIconSize
gdi32
SelectObject
SaveDC
GdiSetBatchLimit
gdiPlaySpoolStream
SetFontEnumeration
GetDeviceCaps
DeleteDC
CreateDCA
GetBkMode
SetMiterLimit
CombineTransform
CreateColorSpaceA
SetPixelFormat
DeleteObject
GetMetaFileBitsEx
GetObjectW
FrameRgn
LPtoDP
shell32
SHQueryRecycleBinA
kernel32
SetFilePointer
SetStdHandle
DeleteCriticalSection
GetStringTypeA
HeapDestroy
LeaveCriticalSection
CompareStringW
VirtualAlloc
LoadLibraryA
GetSystemTimeAsFileTime
HeapReAlloc
TlsAlloc
EnumResourceTypesW
VirtualFree
FreeEnvironmentStringsA
VirtualQuery
GetEnvironmentStringsW
SetTimeZoneInformation
InitializeCriticalSection
IsBadWritePtr
CreateMutexA
GetStdHandle
FlushFileBuffers
GetCommandLineA
GetStringTypeW
WriteFile
GetStartupInfoA
GetModuleHandleA
GetCurrentThreadId
GetTickCount
InterlockedDecrement
GetCPInfo
OpenMutexA
GetCurrentProcessId
QueryPerformanceCounter
ReadFile
MultiByteToWideChar
SetHandleCount
GetLocalTime
GetOEMCP
LCMapStringA
GetCurrentProcess
SetThreadAffinityMask
HeapCreate
GetVersionExW
FreeEnvironmentStringsW
GetModuleFileNameA
SetLastError
CompareStringA
InterlockedExchange
HeapFree
TlsFree
GetSystemTime
GetProcAddress
CloseHandle
GetEnvironmentStrings
GetVersion
UnhandledExceptionFilter
TerminateProcess
SetEvent
LCMapStringW
ExitProcess
TlsGetValue
GetTimeZoneInformation
TlsSetValue
EnterCriticalSection
HeapAlloc
SetEnvironmentVariableW
InterlockedIncrement
GetACP
GetFileType
SetVolumeLabelW
WideCharToMultiByte
SetEnvironmentVariableA
GetLastError
EnumResourceLanguagesA
GetCurrentThread
RtlUnwind
Sleep
user32
DestroyWindow
RegisterClassExA
PostQuitMessage
GetThreadDesktop
DefWindowProcW
GetInputDesktop
OpenDesktopA
RealChildWindowFromPoint
EnumDesktopWindows
ArrangeIconicWindows
DestroyIcon
OemToCharW
UnloadKeyboardLayout
DlgDirListComboBoxA
CreateWindowExA
ShowWindow
SetMenuItemInfoA
RegisterClassA
MessageBoxA
GetDCEx
ToUnicodeEx
ChildWindowFromPoint
Sections
.text Size: 189KB - Virtual size: 189KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 194KB - Virtual size: 209KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 115KB - Virtual size: 115KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 83KB - Virtual size: 82KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ