Static task
static1
Behavioral task
behavioral1
Sample
e18606126920990ef296ca48f7d4f0256fa206aa95dfc60f81143d7b7b272740.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
e18606126920990ef296ca48f7d4f0256fa206aa95dfc60f81143d7b7b272740.exe
Resource
win10v2004-20221111-en
General
-
Target
e18606126920990ef296ca48f7d4f0256fa206aa95dfc60f81143d7b7b272740
-
Size
560KB
-
MD5
d55c7439fa127c24efbd0c858d132ed7
-
SHA1
7ab2848220b044364890e30fd78a2523ae4caf8f
-
SHA256
e18606126920990ef296ca48f7d4f0256fa206aa95dfc60f81143d7b7b272740
-
SHA512
d2c02211e59bebf992cdadd24c3b56c6b607f7bb433b23649782394c43cee3b82b92538ad4946ceee1cb6fcba37f6d4a5af2e1fc67bae77c558990ea1c1922ae
-
SSDEEP
12288:x3H4dUw2xG0vnbv5TQOV93fmd+GwFDufmIV:xo+Xx1b1b9PmgymM
Malware Config
Signatures
Files
-
e18606126920990ef296ca48f7d4f0256fa206aa95dfc60f81143d7b7b272740.exe windows x86
0eab820ee46ef02877f499e5ec3df079
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLocaleInfoA
GetVersionExA
RaiseException
InitializeCriticalSection
DeleteCriticalSection
GetPrivateProfileSectionA
SetEndOfFile
UnmapViewOfFile
VirtualFree
GetProcAddress
LoadLibraryA
GetModuleHandleA
VirtualProtect
VirtualAlloc
InterlockedDecrement
LockResource
LoadResource
SizeofResource
FindResourceA
FindClose
FindFirstFileA
CloseHandle
OpenMutexA
GetVolumeInformationA
GetTempFileNameA
GetTempPathA
GetLastError
CreateMutexA
GetSystemDirectoryA
WaitForSingleObject
GetACP
SetFilePointer
GetFileSize
GetTickCount
WriteFile
CreateFileA
DeleteFileA
SetFileAttributesA
ReadFile
DeviceIoControl
GetModuleFileNameA
GetSystemTimeAsFileTime
lstrlenA
InterlockedIncrement
GetLocaleInfoW
CreateProcessA
InterlockedExchange
IsValidCodePage
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
EnterCriticalSection
LeaveCriticalSection
ExitProcess
RtlUnwind
HeapFree
GetFileAttributesA
GetStartupInfoA
GetCommandLineA
HeapReAlloc
HeapAlloc
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
VirtualQuery
HeapDestroy
HeapCreate
IsBadWritePtr
TerminateProcess
GetCurrentProcess
HeapSize
TlsAlloc
SetLastError
TlsFree
TlsSetValue
TlsGetValue
SetUnhandledExceptionFilter
FlushFileBuffers
GetOEMCP
GetCPInfo
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
IsBadReadPtr
IsBadCodePtr
SetStdHandle
MultiByteToWideChar
GetSystemInfo
gdi32
GetTextCharsetInfo
wininet
HttpSendRequestA
InternetCloseHandle
InternetConnectA
InternetOpenA
InternetCrackUrlA
InternetOpenUrlA
DeleteUrlCacheEntry
InternetReadFile
HttpOpenRequestA
Sections
.text Size: 520KB - Virtual size: 520KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE