Static task
static1
Behavioral task
behavioral1
Sample
3ae48b6bb0a41892f0494cf9a3436c8b9c6da73a3c3dd44d0c93766fef672ecc.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
3ae48b6bb0a41892f0494cf9a3436c8b9c6da73a3c3dd44d0c93766fef672ecc.exe
Resource
win10v2004-20220812-en
General
-
Target
3ae48b6bb0a41892f0494cf9a3436c8b9c6da73a3c3dd44d0c93766fef672ecc
-
Size
116KB
-
MD5
60af8d03f9359940018ffd078d3e3e59
-
SHA1
50386c80e25c4db30d392946c4d374ddfee2baed
-
SHA256
3ae48b6bb0a41892f0494cf9a3436c8b9c6da73a3c3dd44d0c93766fef672ecc
-
SHA512
08a7c98d51a9e26d34adf94a71b6983a70c3017bbd28d9ba884caac04cbcb3c6a54998b62a578dae8a222f4aaf81e84b8c7ed2426c519807119b6b34e981e66a
-
SSDEEP
1536:WuclC6xHTAvhEoRLiJkkaHCqxdSA/V3lggcXj5RN0cekightpjAvj:KC6xzAK0FPg/5RN0cekJtpjAvj
Malware Config
Signatures
Files
-
3ae48b6bb0a41892f0494cf9a3436c8b9c6da73a3c3dd44d0c93766fef672ecc.exe windows x86
a82f2756f36ba9889589d058f1a84aca
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
version
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA
comctl32
InitCommonControlsEx
urlmon
URLDownloadToCacheFileA
wininet
InternetCanonicalizeUrlA
DeleteUrlCacheEntry
InternetSetOptionA
kernel32
GetConsoleMode
GetConsoleCP
DeleteFileA
InterlockedExchange
GetVersion
MultiByteToWideChar
lstrlenA
GetLastError
WriteFile
InterlockedIncrement
WideCharToMultiByte
CreateFileA
SetStdHandle
GetEnvironmentVariableA
CompareStringW
CompareStringA
CloseHandle
GetFileAttributesA
GetFullPathNameA
GetModuleFileNameA
FreeLibrary
SetCurrentDirectoryA
GetProcAddress
LoadLibraryA
GetExitCodeProcess
CreateProcessA
GetSystemDirectoryA
VerifyVersionInfoA
GlobalFree
FindResourceA
LockResource
InterlockedDecrement
LoadResource
VerSetConditionMask
GetSystemInfo
GetCurrentProcess
CreateMutexA
OutputDebugStringA
GetVersionExA
FormatMessageA
LocalFree
GlobalAlloc
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStdHandle
ExitProcess
HeapSize
VirtualFree
HeapCreate
HeapDestroy
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
GetSystemTimeAsFileTime
IsValidCodePage
GetOEMCP
GetCPInfo
GetCurrentThreadId
SetLastError
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
RtlUnwind
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
FlushFileBuffers
SetFilePointer
InitializeCriticalSection
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
Sleep
GetACP
GetLocaleInfoA
GetThreadLocale
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapReAlloc
HeapAlloc
VirtualAlloc
GetModuleHandleA
HeapFree
GetCommandLineA
GetProcessHeap
GetStartupInfoA
RaiseException
user32
CharNextA
MsgWaitForMultipleObjects
SetForegroundWindow
DispatchMessageA
LoadIconA
SystemParametersInfoA
GetSystemMetrics
SetFocus
SetWindowTextA
SendMessageA
SetDlgItemTextA
IsDialogMessageA
MoveWindow
TranslateMessage
PeekMessageA
GetDlgItem
DestroyWindow
SetCursor
GetWindowRect
ShowWindow
CreateDialogParamA
ExitWindowsEx
CharPrevA
MessageBoxA
LoadStringA
LoadCursorA
advapi32
RegCloseKey
FreeSid
AllocateAndInitializeSid
RegOpenKeyExA
RegQueryValueExA
winhttp
WinHttpCloseHandle
WinHttpOpenRequest
WinHttpSendRequest
WinHttpConnect
WinHttpReadData
WinHttpQueryHeaders
WinHttpOpen
WinHttpCrackUrl
WinHttpReceiveResponse
WinHttpSetOption
Sections
.text Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 24KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ