Static task
static1
Behavioral task
behavioral1
Sample
e8c1c8de19107acb3e1a13f846500368c0020209fec00c1fbb8e7ea551a14a50.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
e8c1c8de19107acb3e1a13f846500368c0020209fec00c1fbb8e7ea551a14a50.exe
Resource
win10v2004-20221111-en
General
-
Target
e8c1c8de19107acb3e1a13f846500368c0020209fec00c1fbb8e7ea551a14a50
-
Size
804KB
-
MD5
1889375263e020f50aad922b3e847280
-
SHA1
398b8e251c3e199f425e7c2958f860ad26300ccd
-
SHA256
e8c1c8de19107acb3e1a13f846500368c0020209fec00c1fbb8e7ea551a14a50
-
SHA512
72a81bbd0004a37b19fff3405020134daaa44ce08d5c8df518152da0d1315c446bde700e2d38490166ba375c2ebf78b21ddcedaf440cf5da51843de67cc6883b
-
SSDEEP
12288:wpdz9eMv/+wi6VeooyidZZEG+AiNVG8/Sgx6uKVF43Rs3f7BQuhFnZi8Kd2ejCif:wpFXfAooHdZZEQIGeS46xvdY3Gi7Qsn
Malware Config
Signatures
Files
-
e8c1c8de19107acb3e1a13f846500368c0020209fec00c1fbb8e7ea551a14a50.exe windows x86
06f84760229ff20966844418b8c23588
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
wininet
CreateUrlCacheContainerA
FindNextUrlCacheEntryW
GetUrlCacheEntryInfoExW
FtpDeleteFileW
GetUrlCacheEntryInfoExA
DeleteUrlCacheContainerW
FindNextUrlCacheEntryExA
advapi32
CryptSignHashW
RegRestoreKeyA
ReportEventW
RegOpenKeyA
CryptGetUserKey
RegDeleteKeyW
CryptImportKey
DuplicateToken
CryptEncrypt
CryptDuplicateHash
RegEnumKeyA
RegQueryInfoKeyW
gdi32
RectVisible
DeleteDC
Polyline
Escape
RemoveFontResourceW
EnumFontFamiliesExW
EnumFontFamiliesA
Arc
GetTextCharsetInfo
SelectObject
GetDIBColorTable
GetCharWidth32A
GetObjectA
PtInRegion
GetStockObject
UpdateColors
GetDeviceCaps
DeleteObject
CreateDCA
SetGraphicsMode
kernel32
IsValidCodePage
CreateSemaphoreA
InitializeCriticalSection
GlobalHandle
LCMapStringA
VirtualAlloc
HeapReAlloc
GetProcessHeap
ReleaseMutex
SetLastError
GetConsoleCursorInfo
GetFullPathNameW
FlushFileBuffers
CreateFileA
TlsAlloc
SetThreadLocale
GetUserDefaultLCID
LockFile
CreateMutexA
GetTickCount
GetConsoleOutputCP
GetDriveTypeW
VirtualFree
ExpandEnvironmentStringsW
GlobalGetAtomNameW
HeapDestroy
GetModuleFileNameA
GetStartupInfoA
InterlockedExchange
GetCurrentThreadId
ReadFile
Sleep
GetCommandLineW
GetModuleFileNameW
GetConsoleCP
TlsSetValue
GetStartupInfoW
GetMailslotInfo
HeapAlloc
SetFileAttributesW
GetStringTypeA
RemoveDirectoryA
MapViewOfFile
DuplicateHandle
FreeLibrary
FindFirstFileA
GetProfileIntA
WriteFile
MoveFileExA
CloseHandle
TerminateProcess
SetEnvironmentVariableA
GetConsoleScreenBufferInfo
TlsGetValue
GlobalAlloc
RtlUnwind
VirtualQuery
GetStringTypeW
GetCalendarInfoW
FreeEnvironmentStringsW
GetNamedPipeHandleStateW
WriteConsoleA
DeleteCriticalSection
OpenSemaphoreA
GetTimeFormatA
GetSystemDefaultLCID
WritePrivateProfileStructA
GetEnvironmentStrings
SetFilePointer
GlobalDeleteAtom
FreeEnvironmentStringsA
GetConsoleMode
EnumResourceNamesW
LCMapStringW
FindResourceExW
LeaveCriticalSection
ExitProcess
GetComputerNameW
QueryPerformanceCounter
SetStdHandle
HeapCreate
GetCurrentProcessId
IsValidLocale
EnumSystemLocalesA
FindFirstFileExW
CompareStringW
GetEnvironmentStringsW
LocalReAlloc
GetACP
GetLastError
HeapFree
SetConsoleCtrlHandler
GetFileType
GetCurrentThread
GetSystemTimeAsFileTime
EnterCriticalSection
GetLocaleInfoW
SetConsoleTitleA
SetHandleCount
GetOEMCP
EnumDateFormatsW
HeapSize
SetWaitableTimer
MultiByteToWideChar
GetDateFormatA
GetSystemDefaultLangID
InitializeCriticalSectionAndSpinCount
CreateProcessW
lstrcmpiA
GetModuleHandleA
SetComputerNameA
IsDebuggerPresent
GetTimeZoneInformation
FindResourceW
TlsFree
UnhandledExceptionFilter
WriteConsoleW
DosDateTimeToFileTime
CompareStringA
OpenMutexA
InterlockedCompareExchange
EnumResourceLanguagesW
GetLongPathNameW
SetUnhandledExceptionFilter
LoadLibraryA
SetConsoleTextAttribute
WideCharToMultiByte
InterlockedDecrement
GetCommandLineA
WaitNamedPipeA
GetProcAddress
lstrcmpW
InterlockedIncrement
GetLocaleInfoA
GetCurrentProcess
GetStdHandle
GetCPInfo
GetVersionExA
FormatMessageA
shell32
SHGetDesktopFolder
SHGetPathFromIDList
comctl32
CreateToolbar
ImageList_SetDragCursorImage
ImageList_Copy
InitCommonControlsEx
user32
SetMessageExtraInfo
LoadStringW
CharUpperBuffW
WinHelpW
CharNextExA
RemovePropW
PostThreadMessageA
DdeQueryStringW
ShowWindow
TranslateMDISysAccel
GetClipCursor
ShowScrollBar
UnhookWinEvent
DefWindowProcW
RegisterClassExA
CreateWindowExW
CreateDialogIndirectParamA
RegisterClassA
DestroyAcceleratorTable
DdeCreateStringHandleA
GetSystemMenu
DestroyWindow
DdeGetData
CharToOemW
InflateRect
AdjustWindowRectEx
MessageBoxW
LoadBitmapW
Sections
.text Size: 236KB - Virtual size: 235KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 408KB - Virtual size: 406KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 136KB - Virtual size: 135KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ