InetFunctionForRecover
Static task
static1
Behavioral task
behavioral1
Sample
99dc91c4345d9f955b3c7f6394423fa96471e3b977ab995bf6e12dbd5fdf91b6.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
99dc91c4345d9f955b3c7f6394423fa96471e3b977ab995bf6e12dbd5fdf91b6.exe
Resource
win10v2004-20220812-en
General
-
Target
99dc91c4345d9f955b3c7f6394423fa96471e3b977ab995bf6e12dbd5fdf91b6
-
Size
312KB
-
MD5
31a8cabb1d0df84463dbdbf0e8a643e5
-
SHA1
f8682f97fef72186319e09f73874471da2807f30
-
SHA256
99dc91c4345d9f955b3c7f6394423fa96471e3b977ab995bf6e12dbd5fdf91b6
-
SHA512
b8fa05b47bf8fad46022c4d95047844d87afcedc80841f0b168f9c3af944c0e2e09d9e1f5f5eeeae8d9b6bc7c367062baef1f179509618efc3b217c6178ed515
-
SSDEEP
6144:3zE4b7Az6xB8PJ/eF/zqQ6vtaB6kESa2Zcr9my:3QQ7ix+qltOESa2Z+f
Malware Config
Signatures
Files
-
99dc91c4345d9f955b3c7f6394423fa96471e3b977ab995bf6e12dbd5fdf91b6.exe windows x86
331fb23a0400036029ecac82c32b6b87
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
PathStripToRootW
PathFindFileNameW
SHGetValueW
PathIsUNCW
wininet
InternetConnectW
InternetCloseHandle
HttpOpenRequestW
HttpSendRequestW
HttpQueryInfoW
InternetReadFile
InternetOpenW
kernel32
InterlockedDecrement
GetVersion
GetModuleHandleA
GetFileAttributesW
GetFileTime
lstrcmpW
GlobalFlags
GetVersionExA
LoadLibraryA
GlobalDeleteAtom
GlobalFindAtomW
GlobalAddAtomW
InterlockedExchange
CompareStringA
GetLocaleInfoW
RaiseException
RtlUnwind
ExitProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetModuleHandleW
HeapFree
HeapAlloc
GetProcessHeap
GetStartupInfoA
TerminateProcess
IsDebuggerPresent
HeapReAlloc
HeapSize
Sleep
GetStdHandle
GetModuleFileNameA
SetStdHandle
GetFileType
SetHandleCount
CreateFileA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
GetConsoleCP
GetConsoleMode
GetTimeZoneInformation
GetLocaleInfoA
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEnvironmentVariableA
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
GetFullPathNameW
GetVolumeInformationW
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
ReadFile
GetThreadLocale
ReleaseSemaphore
CreateSemaphoreW
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
CompareStringW
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
GetLocalTime
FindFirstFileW
GetCurrentThreadId
InterlockedIncrement
InterlockedCompareExchange
ReleaseMutex
WaitForSingleObject
LocalFree
FormatMessageW
GetSystemTime
GetCurrentProcessId
WideCharToMultiByte
SetLastError
FreeLibrary
LoadLibraryW
GetProcAddress
CreateMutexW
GetTempPathW
CreateFileW
GetModuleFileNameW
lstrlenW
WriteFile
CloseHandle
GetSystemTimeAsFileTime
MultiByteToWideChar
GetLastError
FindResourceW
LoadResource
LockResource
SizeofResource
GetCommandLineA
user32
DestroyMenu
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
ModifyMenuW
EnableMenuItem
CheckMenuItem
LoadIconW
WinHelpW
GetCapture
GetClassLongW
SetPropW
GetPropW
RemovePropW
GetForegroundWindow
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
MapWindowPoints
SetForegroundWindow
GetClientRect
GetMenu
PostMessageW
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
AdjustWindowRectEx
CallWindowProcW
SystemParametersInfoA
IsIconic
GetWindowPlacement
CopyRect
SetWindowPos
SetWindowLongW
IsWindow
GetDlgItem
GetFocus
GetWindow
GetDlgCtrlID
GetWindowRect
GetClassNameW
PtInRect
SetWindowTextW
SetWindowsHookExW
CallNextHookEx
GetKeyState
PeekMessageW
ValidateRect
ClientToScreen
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
GetWindowTextW
LoadCursorW
GetDC
ReleaseDC
GetSysColor
GetSysColorBrush
UnhookWindowsHookEx
GetWindowThreadProcessId
SendMessageW
GetParent
GetWindowLongW
GetLastActivePopup
IsWindowEnabled
EnableWindow
CharUpperW
GetSystemMetrics
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
RegisterWindowMessageW
DefWindowProcW
PostQuitMessage
MessageBoxW
DispatchMessageW
UnregisterClassA
gdi32
DeleteDC
CreateBitmap
GetStockObject
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetMapMode
SetTextColor
SetBkColor
RestoreDC
SaveDC
GetDeviceCaps
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
ExtTextOutW
TextOutW
RectVisible
PtVisible
DeleteObject
GetClipBox
comdlg32
GetFileTitleW
winspool.drv
ClosePrinter
OpenPrinterW
DocumentPropertiesW
ole32
CoInitializeEx
oleaut32
VariantInit
VariantChangeType
VariantClear
Exports
Exports
Sections
.text Size: 224KB - Virtual size: 220KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 68KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 620B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ