Static task
static1
Behavioral task
behavioral1
Sample
4fe0f0ee560e39533f96da3126cdf5a50e3c9082aa90de79425d2bfe5d0d2472.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
4fe0f0ee560e39533f96da3126cdf5a50e3c9082aa90de79425d2bfe5d0d2472.exe
Resource
win10v2004-20221111-en
General
-
Target
4fe0f0ee560e39533f96da3126cdf5a50e3c9082aa90de79425d2bfe5d0d2472
-
Size
1.1MB
-
MD5
a63c5ede113c9b3736ca64283f8b7b08
-
SHA1
7c752738f10813c78843c6680e9b507b0a2de80f
-
SHA256
4fe0f0ee560e39533f96da3126cdf5a50e3c9082aa90de79425d2bfe5d0d2472
-
SHA512
c7d6da998c2b7164dde4f9ac97213842da5532df9030d7b523ccd842f5147890cdfab1544c00bc930cf9a34ab4f8eeb16fcb495ecd099622c4c75da19b90d80f
-
SSDEEP
24576:JaOLnY4i1pdtwDtVmyCOiEW4KeRMkWdJ:J5LnQ1PtKtVm6i37eRYJ
Malware Config
Signatures
Files
-
4fe0f0ee560e39533f96da3126cdf5a50e3c9082aa90de79425d2bfe5d0d2472.exe windows x86
251f8bf848348783c66d917d680e3be9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitThread
LeaveCriticalSection
EnterCriticalSection
GetModuleHandleA
WaitForSingleObject
Sleep
ResumeThread
GetTickCount
DeleteFileA
SetFileAttributesA
InterlockedDecrement
lstrlenA
SetLastError
GetFileAttributesA
GetFullPathNameA
GetModuleFileNameA
GlobalAddAtomA
GlobalDeleteAtom
GetCurrentThreadId
FindClose
FindNextFileA
FindFirstFileA
GetWindowsDirectoryA
lstrcmpA
LoadLibraryA
FreeLibrary
GetCurrentProcess
GetProcAddress
GetTempPathA
CopyFileA
GetTempFileNameA
LockResource
LoadResource
FindResourceExA
SizeofResource
FindResourceA
GetCommandLineA
TerminateProcess
CloseHandle
CreateProcessA
GetStartupInfoA
SetFilePointer
GetFileType
DuplicateHandle
CreateFileA
ReadFile
SystemTimeToFileTime
GetCurrentDirectoryA
WriteFile
FileTimeToSystemTime
FileTimeToDosDateTime
GetFileSize
GetFileInformationByHandle
MapViewOfFile
CreateFileMappingA
UnmapViewOfFile
GetLocalTime
InitializeCriticalSection
DeleteCriticalSection
QueryPerformanceFrequency
QueryPerformanceCounter
OutputDebugStringA
GetVersionExA
LocalFree
FormatMessageA
GetSystemDefaultLangID
GetUserDefaultLangID
WideCharToMultiByte
GetEnvironmentVariableA
GetShortPathNameA
GetSystemDirectoryA
GetLocaleInfoA
GetDriveTypeA
MoveFileA
CompareFileTime
GetFileTime
OpenFile
GetPrivateProfileStringA
WritePrivateProfileStringA
HeapAlloc
HeapFree
GlobalFree
GlobalAlloc
GetExitCodeProcess
MultiByteToWideChar
FlushFileBuffers
lstrcatA
CreateThread
CreateMutexA
OpenMutexA
CreateEventA
SetEvent
LocalAlloc
InterlockedExchange
RaiseException
lstrlenW
GlobalUnlock
GlobalLock
lstrcpyA
GlobalFindAtomA
lstrcmpiA
GlobalGetAtomNameA
GetVersion
InterlockedIncrement
SetThreadPriority
SuspendThread
MulDiv
FileTimeToLocalFileTime
LockFile
UnlockFile
SetEndOfFile
GetVolumeInformationA
lstrcpynA
GetThreadLocale
GetCurrentThread
GlobalFlags
TlsAlloc
GlobalHandle
TlsFree
GlobalReAlloc
TlsSetValue
LocalReAlloc
TlsGetValue
GetProcessVersion
GetCPInfo
GetOEMCP
SetErrorMode
RtlUnwind
IsBadReadPtr
GetTimeZoneInformation
GetSystemTime
ExitProcess
GetLastError
SetStdHandle
GetACP
HeapReAlloc
HeapSize
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
SetUnhandledExceptionFilter
IsBadCodePtr
CompareStringA
CompareStringW
SetEnvironmentVariableA
oledlg
ord8
ole32
CoUninitialize
CLSIDFromProgID
CLSIDFromString
CoTaskMemAlloc
CoTaskMemFree
StgCreateDocfileOnILockBytes
CoGetClassObject
StgOpenStorageOnILockBytes
OleUninitialize
CreateILockBytesOnHGlobal
OleInitialize
CoFreeUnusedLibraries
CoRegisterMessageFilter
OleFlushClipboard
CoRevokeClassObject
OleIsCurrentClipboard
CoInitialize
CoCreateGuid
OleRun
CoCreateInstance
olepro32
ord253
oleaut32
GetErrorInfo
SysStringLen
VariantTimeToSystemTime
SysAllocStringLen
VariantChangeType
SysAllocStringByteLen
VariantCopy
SafeArrayCreate
SafeArrayGetDim
SafeArrayGetElemsize
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayAccessData
SafeArrayUnaccessData
SysAllocString
SysFreeString
VariantClear
VariantInit
wininet
InternetGetLastResponseInfoA
InternetCrackUrlA
InternetCanonicalizeUrlA
HttpQueryInfoA
HttpEndRequestA
HttpSendRequestA
HttpSendRequestExA
HttpOpenRequestA
HttpAddRequestHeadersA
InternetConnectA
InternetQueryDataAvailable
InternetReadFile
InternetWriteFile
InternetSetFilePointer
InternetGetConnectedState
InternetSetStatusCallback
InternetCloseHandle
InternetOpenA
InternetSetOptionExA
Sections
.text Size: 452KB - Virtual size: 451KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 92KB - Virtual size: 89KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 56KB - Virtual size: 134KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 488KB - Virtual size: 485KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 16KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE