Static task
static1
Behavioral task
behavioral1
Sample
715a293a21b6c4c11db77ac3f2b42410417b5e1414c09c0b326405a218c14c7e.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
715a293a21b6c4c11db77ac3f2b42410417b5e1414c09c0b326405a218c14c7e.exe
Resource
win10v2004-20220812-en
General
-
Target
715a293a21b6c4c11db77ac3f2b42410417b5e1414c09c0b326405a218c14c7e
-
Size
344KB
-
MD5
0f46ff5e343c81567fb71fe3449c19a0
-
SHA1
249fec7a752f9dacba01f6bd8ba2aac119c6f9e7
-
SHA256
715a293a21b6c4c11db77ac3f2b42410417b5e1414c09c0b326405a218c14c7e
-
SHA512
42fcc0def451fba484269cef8a2b185970fa15a4bc2f234e6922e8a7ff743628b0253cc34ec962064c6842d3fe6ff52bd6076ba874708a48c7c28fdf8b02a8dc
-
SSDEEP
6144:iTp9dBQMKhXLf0a/ygVFheZbDN3tRveL83rxrwYc+ATsZXfr1yKQaZ+pHch8:mp9dwh7JbFhQ/NdRvHrxg+ATsZPr1ylx
Malware Config
Signatures
Files
-
715a293a21b6c4c11db77ac3f2b42410417b5e1414c09c0b326405a218c14c7e.exe windows x86
14463e3d66affb8845d10ceae797fe88
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
wininet
InternetSetOptionW
InternetGetCookieA
HttpOpenRequestA
InternetConnectW
InternetWriteFileExA
InternetConfirmZoneCrossingW
InternetDialW
comctl32
ImageList_DragMove
CreatePropertySheetPageW
InitCommonControlsEx
CreateStatusWindowA
ImageList_Remove
CreateUpDownControl
ImageList_LoadImageA
ImageList_SetFlags
ImageList_GetImageInfo
ImageList_GetIcon
ImageList_Draw
ImageList_BeginDrag
ImageList_LoadImageW
CreateStatusWindow
ImageList_Duplicate
ImageList_AddMasked
ImageList_Add
ImageList_SetOverlayImage
ImageList_GetBkColor
DrawStatusTextW
DrawStatusTextA
CreateMappedBitmap
ImageList_SetBkColor
ImageList_DrawIndirect
ImageList_EndDrag
MakeDragList
user32
SendNotifyMessageW
GetScrollBarInfo
LoadCursorFromFileW
GetForegroundWindow
RegisterClassExA
RegisterClassA
GetPriorityClipboardFormat
CharUpperW
GetCursorInfo
ArrangeIconicWindows
GetShellWindow
RegisterDeviceNotificationA
GetMenuStringA
GetNextDlgTabItem
CloseWindowStation
PaintDesktop
ChangeMenuA
GetCursorPos
ShowWindow
DefWindowProcA
DefFrameProcA
EqualRect
GetTabbedTextExtentA
ClipCursor
VkKeyScanExW
EndDialog
LoadMenuIndirectW
SetUserObjectSecurity
OpenClipboard
FindWindowW
SetParent
EnumDisplayMonitors
RedrawWindow
wvsprintfW
GetCapture
LoadBitmapA
SetClassLongA
SetWindowPos
CreateWindowExW
InsertMenuItemA
DestroyWindow
MessageBoxA
GetUserObjectInformationA
CloseWindow
GetWindow
AdjustWindowRectEx
advapi32
CryptHashData
RegCreateKeyExA
RegEnumValueA
InitiateSystemShutdownA
RegEnumKeyExA
ReportEventA
CryptGetUserKey
CryptSetProvParam
CryptDestroyHash
RegFlushKey
CryptGetDefaultProviderW
RegConnectRegistryA
kernel32
EnumDateFormatsW
VirtualFree
IsValidLocale
TlsSetValue
EnterCriticalSection
SetThreadLocale
GetSystemTimeAsFileTime
GetProcAddress
ReadFile
GetStartupInfoW
FillConsoleOutputCharacterA
GetModuleFileNameW
TlsFree
GetLocalTime
SetStdHandle
GetStringTypeA
GetProfileIntA
RaiseException
SetEnvironmentVariableA
TerminateProcess
GetSystemDirectoryA
PulseEvent
GetCurrentProcessId
LoadLibraryA
CreateMutexA
SetLocalTime
WriteFile
GetNamedPipeInfo
HeapValidate
MultiByteToWideChar
GetLongPathNameW
LockFile
GetCommandLineA
LeaveCriticalSection
GetEnvironmentStrings
DeleteCriticalSection
FindFirstFileExW
DeleteFileA
CreateFileMappingA
InterlockedIncrement
ExitProcess
GetNumberFormatA
WritePrivateProfileStringA
GetShortPathNameW
GetTickCount
CompareStringW
VirtualQuery
GetLastError
lstrcmpi
GetProcessShutdownParameters
FreeEnvironmentStringsW
GetSystemTime
WideCharToMultiByte
GetModuleFileNameA
WriteConsoleOutputW
CreateThread
RtlUnwind
GetVersion
IsBadWritePtr
GetPrivateProfileSectionA
HeapCreate
FlushFileBuffers
lstrcpy
GetCurrentThreadId
HeapReAlloc
HeapAlloc
GetTimeZoneInformation
SetConsoleCursorInfo
TlsGetValue
CompareStringA
InterlockedExchange
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStringsW
SetComputerNameW
SetConsoleWindowInfo
LocalCompact
ExpandEnvironmentStringsA
GetCompressedFileSizeA
HeapFree
GetFileType
GetModuleHandleA
TlsAlloc
GetCurrentThread
InterlockedDecrement
LCMapStringA
GetCurrentProcess
HeapDestroy
GetProcAddress
UnhandledExceptionFilter
GetStringTypeW
GetCommandLineW
FindNextChangeNotification
SetFilePointer
lstrlen
GetPriorityClass
SetLastError
GetCPInfo
InitializeCriticalSection
GetStartupInfoA
OpenMutexA
CloseHandle
VirtualAlloc
SetHandleCount
LCMapStringW
LocalFree
QueryPerformanceCounter
Sections
.text Size: 112KB - Virtual size: 110KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 92KB - Virtual size: 91KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 92KB - Virtual size: 105KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 44KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ