Static task
static1
Behavioral task
behavioral1
Sample
952a8149c9ef2f8e33973932ffba969b8cbdc2030f43fc9a307b095dd3ea327d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
952a8149c9ef2f8e33973932ffba969b8cbdc2030f43fc9a307b095dd3ea327d.exe
Resource
win10v2004-20221111-en
General
-
Target
952a8149c9ef2f8e33973932ffba969b8cbdc2030f43fc9a307b095dd3ea327d
-
Size
377KB
-
MD5
ee61a30062358afa26115a87aff998e1
-
SHA1
ccfee45ad5a5c76060a823ed40fec8919c4d23ed
-
SHA256
952a8149c9ef2f8e33973932ffba969b8cbdc2030f43fc9a307b095dd3ea327d
-
SHA512
2bb09ae00a75db9c52320195944a9e9b68b1f5d226ae3e6292eeebbfbbd6f440ab458c43bad016db09d1eebda51244e993d9db3f924b23276fcd79f6b340c43a
-
SSDEEP
6144:6ZPCjzY7lgUVF+rsQs0wGhTRoq1RFbkJwXAURI4O09LoFKc063Mau:uPAzY7qwuhGUFmUAUV9LoF4KMau
Malware Config
Signatures
Files
-
952a8149c9ef2f8e33973932ffba969b8cbdc2030f43fc9a307b095dd3ea327d.exe windows x86
a0f6a9e5de1e9d9c865248fe43dccb5e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
iphlpapi
GetTcpStatistics
GetIpStatistics
GetIfTable
GetIfEntry
wininet
InternetReadFile
InternetQueryDataAvailable
InternetOpenW
InternetOpenUrlW
InternetQueryOptionW
InternetCloseHandle
HttpQueryInfoW
kernel32
CreateMutexW
ReleaseMutex
LocalAlloc
LeaveCriticalSection
TlsGetValue
EnterCriticalSection
GlobalReAlloc
GlobalHandle
InitializeCriticalSection
TlsAlloc
TlsSetValue
LocalReAlloc
DeleteCriticalSection
TlsFree
InterlockedIncrement
lstrlenA
GlobalFlags
GetFileTime
SetErrorMode
WritePrivateProfileStringW
HeapFree
HeapAlloc
GetProcessHeap
GetStartupInfoW
RaiseException
RtlUnwind
HeapReAlloc
SetStdHandle
GetFileType
ExitThread
GetCurrentThread
ExitProcess
HeapSize
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetSystemTimeAsFileTime
SetUnhandledExceptionFilter
TerminateProcess
IsDebuggerPresent
VirtualAlloc
GetCPInfo
GetACP
GetOEMCP
Sleep
GetTimeZoneInformation
GetConsoleCP
GetConsoleMode
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
GetCurrentDirectoryA
GetDriveTypeA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
SetEnvironmentVariableA
ConvertDefaultLocale
GetVersion
EnumResourceLanguagesW
lstrcmpA
GetLocaleInfoW
CompareStringA
InterlockedExchange
FreeResource
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
CompareStringW
LoadLibraryA
lstrcmpW
GetVersionExA
CreateEventW
SetEvent
GetCurrentThreadId
SetThreadPriority
CreateFileW
GetFullPathNameW
GetVolumeInformationW
GetCurrentProcess
DuplicateHandle
CloseHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GetThreadLocale
GetModuleHandleA
FindFirstFileW
FileTimeToLocalFileTime
FileTimeToSystemTime
FindNextFileW
FindClose
GetCurrentProcessId
WideCharToMultiByte
InterlockedDecrement
GlobalLock
GlobalUnlock
LocalFree
lstrlenW
MulDiv
SetLastError
GetTickCount
GetWindowsDirectoryW
GetPrivateProfileSectionW
MultiByteToWideChar
GetTempPathW
CreateProcessW
WaitForSingleObject
GetExitCodeProcess
FormatMessageW
GetModuleHandleW
GetPrivateProfileStringW
GetProcAddress
CopyFileW
LoadLibraryW
GetSystemDefaultLCID
GetStringTypeExW
GetExitCodeThread
FreeLibrary
SuspendThread
ResumeThread
GetLastError
FindResourceW
LoadResource
LockResource
SizeofResource
DeleteFileW
CreateDirectoryW
GetModuleFileNameW
GlobalSize
GetPrivateProfileSectionNamesW
GetFileAttributesW
GlobalAlloc
GlobalFree
GetVersionExW
CreateThread
user32
GetSysColorBrush
LoadCursorW
UnregisterClassW
PostQuitMessage
RegisterWindowMessageW
LoadIconW
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
GetCapture
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
IsWindow
SetFocus
GetWindowTextW
GetForegroundWindow
SetActiveWindow
GetDlgItem
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
MapWindowPoints
UpdateWindow
GetMenu
CreateWindowExW
GetClassInfoExW
UnregisterClassA
RegisterClassW
AdjustWindowRectEx
PtInRect
GetDlgCtrlID
DefWindowProcW
CallWindowProcW
SetWindowLongW
SetWindowPos
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
SetWindowsHookExW
CallNextHookEx
GetMessageW
GetActiveWindow
IsWindowVisible
GetKeyState
GetCursorPos
ValidateRect
CharUpperW
GetSystemMetrics
EndPaint
BeginPaint
ClientToScreen
GrayStringW
DrawTextExW
TabbedTextOutW
GetWindowThreadProcessId
GetWindowLongW
IsWindowEnabled
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
GetFocus
GetParent
ModifyMenuW
CheckMenuItem
UnhookWindowsHookEx
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
GetSysColor
InvalidateRect
CopyRect
DrawTextW
ReleaseDC
DestroyMenu
CreateDialogIndirectParamW
GetNextDlgTabItem
EndDialog
SetCursor
ShowWindow
SetWindowTextW
SetForegroundWindow
IsDialogMessageW
GetDC
GetClientRect
GetSystemMenu
PostMessageW
EnableMenuItem
KillTimer
SetTimer
EnableWindow
GetDesktopWindow
MessageBoxW
MsgWaitForMultipleObjects
PeekMessageW
TranslateMessage
DispatchMessageW
GetLastActivePopup
SendMessageW
GetWindow
GetClassInfoW
gdi32
PtVisible
RectVisible
TextOutW
ExtTextOutW
Escape
SelectObject
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
DeleteDC
GetStockObject
GetObjectW
DeleteObject
SetBkMode
SetBkColor
RestoreDC
SaveDC
CreateBitmap
GetDeviceCaps
BitBlt
CreateCompatibleDC
CreateCompatibleBitmap
GetClipBox
SetMapMode
SetTextColor
comdlg32
GetFileTitleW
winspool.drv
ClosePrinter
DocumentPropertiesW
OpenPrinterW
EnumPrintersW
GetPrinterDriverW
advapi32
RegSetValueExW
RegCreateKeyExW
RegQueryValueW
RegEnumKeyW
RegDeleteKeyW
RegOpenKeyExW
RegQueryValueExW
RegOpenKeyW
RegCloseKey
shell32
SHGetDesktopFolder
SHGetMalloc
ord680
ShellExecuteW
SHGetPathFromIDListW
shlwapi
PathIsUNCW
PathFindExtensionW
PathStripToRootW
PathFindFileNameW
oleaut32
VariantInit
VariantChangeType
VariantClear
Sections
.text Size: 216KB - Virtual size: 212KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 52KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.0rdata Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE