Static task
static1
Behavioral task
behavioral1
Sample
dc6be846d14946fb48f1cf4eef99b987cc7f6ba520422b4e130976d191727909.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
dc6be846d14946fb48f1cf4eef99b987cc7f6ba520422b4e130976d191727909.exe
Resource
win10v2004-20220812-en
General
-
Target
dc6be846d14946fb48f1cf4eef99b987cc7f6ba520422b4e130976d191727909
-
Size
320KB
-
MD5
04d1ea8a71a3b58a9fe15d472fa7a461
-
SHA1
a86e1edea2edd21edb61516d7f22d5e34de3441d
-
SHA256
dc6be846d14946fb48f1cf4eef99b987cc7f6ba520422b4e130976d191727909
-
SHA512
414648698df989d20b61f2d7d815ee2c5bf4e840f7001d6a287f7f344de394765056b233d0daac0a5e61a441820fd975dde25eefec2990815352cae8853ee82a
-
SSDEEP
3072:+47eOwd5rWgkb4MsekXvKflbWYefttWhthFLbwbN5bA4nQKWn51BuAK9sI6Ahqse:+47yDBvevbc1tqbwZtuhATIWbt0cRq
Malware Config
Signatures
Files
-
dc6be846d14946fb48f1cf4eef99b987cc7f6ba520422b4e130976d191727909.exe windows x86
2297331111ae4e4db1db341be0a4ba6c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentThreadId
InterlockedIncrement
InterlockedDecrement
GlobalUnlock
GlobalLock
GlobalAlloc
SetLastError
MulDiv
WinExec
SetErrorMode
SetProcessWorkingSetSize
GetSystemDefaultLangID
CompareStringA
GetModuleHandleA
GetModuleFileNameA
GetWindowsDirectoryA
GetSystemDirectoryA
LoadLibraryA
SetCurrentDirectoryA
GetCurrentDirectoryA
SetEvent
CloseHandle
Sleep
GetLastError
OutputDebugStringA
TerminateThread
SystemTimeToFileTime
SetFileTime
GetFileTime
FileTimeToSystemTime
GetFileInformationByHandle
ReadFile
CreateDirectoryA
CopyFileA
GetCurrentProcess
FindResourceA
GetTempPathA
DeleteFileA
SetEnvironmentVariableA
FlushFileBuffers
CreateFileA
GetTimeZoneInformation
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
FreeLibrary
GetStringTypeA
GetConsoleMode
GetConsoleCP
SetFilePointer
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetStartupInfoA
GetFileType
SetHandleCount
GetCommandLineW
GetCommandLineA
GetEnvironmentStrings
FreeEnvironmentStringsA
LCMapStringA
GetOEMCP
GetStdHandle
WriteFile
HeapCreate
FlushInstructionCache
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
RaiseException
CreateMutexA
ReleaseMutex
SetFileAttributesA
InterlockedExchange
LoadResource
LockResource
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetSystemTimeAsFileTime
ExitProcess
CreateThread
ExitThread
RtlUnwind
LocalFree
SetEndOfFile
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
InterlockedCompareExchange
GetThreadLocale
GetLocaleInfoA
GetACP
GetProcessHeap
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
HeapDestroy
GetVersionExA
SizeofResource
user32
GetSysColor
SetWindowPos
ShowWindow
GetClientRect
TranslateMessage
wsprintfA
DestroyWindow
MoveWindow
UnregisterClassA
ClientToScreen
ScreenToClient
GetDC
ReleaseDC
InvalidateRect
InvalidateRgn
RedrawWindow
SetCapture
IsChild
GetParent
GetDlgItem
ReleaseCapture
FillRect
EndPaint
GetCursorPos
SetForegroundWindow
TrackPopupMenu
TrackPopupMenuEx
PtInRect
MessageBeep
LoadStringA
SetMenuDefaultItem
MonitorFromPoint
RemoveMenu
GetMenuItemCount
CreatePopupMenu
GetSubMenu
PostQuitMessage
DestroyIcon
GetSystemMetrics
KillTimer
SetTimer
DestroyMenu
GetMenuState
CheckMenuItem
GetActiveWindow
GetWindowRect
MapWindowPoints
EndDialog
IsWindow
SetFocus
GetFocus
GetWindow
DestroyAcceleratorTable
GetDesktopWindow
BeginPaint
gdi32
CreateSolidBrush
GetDeviceCaps
BitBlt
CreateCompatibleDC
CreateCompatibleBitmap
DeleteDC
SelectObject
DeleteObject
GetStockObject
advapi32
RegCreateKeyExA
RegCloseKey
RegSetValueExA
RegOpenKeyExA
RegQueryValueExA
ole32
StringFromGUID2
CLSIDFromProgID
CoGetClassObject
OleLockRunning
OleUninitialize
OleInitialize
CreateStreamOnHGlobal
CoTaskMemFree
CoTaskMemRealloc
CoTaskMemAlloc
CoInitialize
CoUninitialize
CLSIDFromString
CoCreateInstance
oleaut32
SysAllocStringLen
SysFreeString
SysAllocString
VarUI4FromStr
GetErrorInfo
SysStringByteLen
VariantInit
VariantClear
OleCreateFontIndirect
LoadRegTypeLi
LoadTypeLi
SysStringLen
shlwapi
PathFindFileNameW
PathFileExistsW
PathFileExistsA
comctl32
InitCommonControlsEx
wininet
InternetOpenA
HttpOpenRequestA
InternetConnectA
InternetCrackUrlA
HttpQueryInfoA
InternetReadFile
InternetOpenUrlA
InternetCloseHandle
HttpSendRequestA
urlmon
URLDownloadToFileA
winmm
timeGetTime
Sections
.text Size: 248KB - Virtual size: 244KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 48KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ