Static task
static1
Behavioral task
behavioral1
Sample
418ff60288a177edd536c8375b586e91e6ff0736537bb78fcb4cadeb3026d2ac.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
418ff60288a177edd536c8375b586e91e6ff0736537bb78fcb4cadeb3026d2ac.exe
Resource
win10v2004-20220901-en
General
-
Target
418ff60288a177edd536c8375b586e91e6ff0736537bb78fcb4cadeb3026d2ac
-
Size
140KB
-
MD5
e5060d88d02e8c942bcb84ca4ae4f699
-
SHA1
7ffc339c8c0e9e910c19eb6dd4a0ae731b4791a3
-
SHA256
418ff60288a177edd536c8375b586e91e6ff0736537bb78fcb4cadeb3026d2ac
-
SHA512
73d42e5c7d1d12fddab6a82499a88ed4e54fbeea532be856f03348877f99ba46e96b7332113eea2f698217f4b69bb60f37f75187a4b26dd2aa83e6567c68646f
-
SSDEEP
1536:92Mo/ianib5WswxsdaPpwienF+rteoNqqBCNEy3JoSBB2czLkXeY7HnYZ83f7mWC:4MH5WtxuaQMeUqP3jQYZ83f7mixt/nWv
Malware Config
Signatures
Files
-
418ff60288a177edd536c8375b586e91e6ff0736537bb78fcb4cadeb3026d2ac.exe windows x86
c405c2e31087a52443c4c7880045d29e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ole32
CoCreateInstance
CoUninitialize
CoTaskMemFree
CoInitialize
wininet
InternetConnectA
HttpSendRequestA
InternetOpenA
HttpQueryInfoA
HttpOpenRequestA
InternetReadFile
InternetCloseHandle
ws2_32
WSACleanup
gethostbyname
inet_ntoa
WSAStartup
iphlpapi
GetAdaptersInfo
advapi32
RegCloseKey
OpenSCManagerA
DeleteService
StartServiceCtrlDispatcherA
ControlService
CreateServiceA
QueryServiceConfigA
RegisterServiceCtrlHandlerA
CloseServiceHandle
StartServiceA
OpenServiceA
SetServiceStatus
RegCreateKeyA
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenThreadToken
RegQueryValueExA
RegSetValueExA
RegDeleteValueA
RegCreateKeyExA
OpenProcessToken
RegOpenKeyExA
user32
TranslateMessage
PeekMessageA
PostMessageA
DispatchMessageA
MsgWaitForMultipleObjects
shell32
CommandLineToArgvW
kernel32
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetSystemTimeAsFileTime
Sleep
HeapSize
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
GetConsoleCP
GetConsoleMode
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
FlushFileBuffers
FreeEnvironmentStringsA
GetStdHandle
ExitProcess
HeapReAlloc
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
InterlockedDecrement
InterlockedIncrement
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
RtlUnwind
RaiseException
CreateFileA
CloseHandle
GetLocalTime
LocalFree
GetLastError
GetCurrentThreadId
GetCurrentProcessId
SetFilePointer
CreateDirectoryA
GetFullPathNameA
SetCurrentDirectoryA
GetTempFileNameA
FindClose
FindFirstFileA
ReadFile
LoadLibraryA
GetProcAddress
GetLongPathNameA
GetTempPathA
FreeLibrary
ExpandEnvironmentStringsA
DeleteFileA
GetCurrentDirectoryA
ExpandEnvironmentStringsW
WriteFile
Module32First
Process32Next
GetCurrentProcess
CreateToolhelp32Snapshot
OpenProcess
Process32First
CreateProcessA
TerminateProcess
WaitForSingleObject
Module32Next
GetExitCodeProcess
GetCurrentThread
SetLastError
MultiByteToWideChar
GetCommandLineA
LocalAlloc
WideCharToMultiByte
GetModuleHandleA
EnterCriticalSection
CreateEventA
LeaveCriticalSection
InitializeCriticalSection
SetEvent
GetTickCount
DeleteCriticalSection
GetModuleFileNameA
GetVersionExA
SetProcessShutdownParameters
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapFree
HeapAlloc
GetProcessHeap
GetStartupInfoA
Sections
.text Size: 88KB - Virtual size: 87KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ