Static task
static1
Behavioral task
behavioral1
Sample
1fda514f65fe3f6ba506707aeaacd7f9ec8fff289945ce6f5c6a7b6d9c3b62e0.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
1fda514f65fe3f6ba506707aeaacd7f9ec8fff289945ce6f5c6a7b6d9c3b62e0.exe
Resource
win10v2004-20220901-en
General
-
Target
1fda514f65fe3f6ba506707aeaacd7f9ec8fff289945ce6f5c6a7b6d9c3b62e0
-
Size
172KB
-
MD5
5ccb14888186eb1d784879fd538db8d6
-
SHA1
1ce479aafbc6f1983a5996cac551a8970aac522c
-
SHA256
1fda514f65fe3f6ba506707aeaacd7f9ec8fff289945ce6f5c6a7b6d9c3b62e0
-
SHA512
3613f64a105f01ec3d05f9d0165a4560488ef62ddb4fa6fed087804f994f2d3a76d140019263f79dface626f1ef69edc352bbc0fe91f242e641dd9544bfe339d
-
SSDEEP
3072:ILH1c0w3KvCpjkRnFUKPu+3iuuttYNdhs6:ILH0TjWnFU9uSYNDj
Malware Config
Signatures
Files
-
1fda514f65fe3f6ba506707aeaacd7f9ec8fff289945ce6f5c6a7b6d9c3b62e0.exe windows x86
39e8b2aae8c7008400d08819076e73d6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
urlmon
URLDownloadToCacheFileA
kernel32
FreeLibrary
lstrcmpiW
LoadLibraryExW
GetModuleHandleW
GetLastError
InitializeCriticalSection
DeleteCriticalSection
InterlockedDecrement
InterlockedIncrement
Sleep
lstrcpyA
ResetEvent
WaitForSingleObject
GetTickCount
GetCurrentThreadId
CreateThread
GetLocalTime
SystemTimeToFileTime
CompareFileTime
FileTimeToSystemTime
DeleteFileA
GlobalAddAtomA
GetModuleFileNameA
GetProcessHeap
lstrcatA
CreateEventA
ExitProcess
GetCommandLineA
GlobalFindAtomA
CloseHandle
RaiseException
LeaveCriticalSection
lstrlenW
GetModuleFileNameW
EnterCriticalSection
CreateFileA
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
IsValidCodePage
IsValidLocale
HeapFree
HeapAlloc
FindResourceExW
LoadResource
LockResource
SizeofResource
FindResourceW
WideCharToMultiByte
SetEvent
MultiByteToWideChar
SetEndOfFile
CreateFileW
lstrlenA
EnumSystemLocalesA
GetUserDefaultLCID
GetLocaleInfoW
SetStdHandle
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
FlushFileBuffers
SetFilePointer
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
ReadFile
LoadLibraryA
GetOEMCP
GetCPInfo
HeapDestroy
HeapReAlloc
HeapSize
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
VirtualProtect
VirtualAlloc
GetProcAddress
GetModuleHandleA
GetSystemInfo
VirtualQuery
GetStartupInfoA
HeapCreate
VirtualFree
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
SetHandleCount
GetStdHandle
GetFileType
WriteFile
GetConsoleCP
GetConsoleMode
RtlUnwind
user32
UnregisterClassA
GetForegroundWindow
SetForegroundWindow
CharNextW
wsprintfA
FindWindowExA
PostMessageW
DispatchMessageW
GetMessageW
PostThreadMessageW
EnumChildWindows
advapi32
RegCreateKeyExA
RegSetValueExA
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegDeleteValueW
RegCreateKeyExW
RegSetValueExW
RegOpenKeyExW
RegEnumKeyExW
RegQueryInfoKeyW
RegDeleteKeyW
ole32
CoTaskMemRealloc
CoTaskMemAlloc
CoInitialize
CoCreateInstance
CoTaskMemFree
oleaut32
LoadTypeLi
LoadRegTypeLi
SysStringLen
VarUI4FromStr
VariantClear
SysAllocString
SysFreeString
SysAllocStringLen
shlwapi
StrStrIA
StrCmpNA
PathRemoveExtensionA
PathFindFileNameA
UrlIsA
StrCmpIW
StrStrIW
Sections
.text Size: 116KB - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 28KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE