Static task
static1
Behavioral task
behavioral1
Sample
cd73f6562e0e4d49a8fe056772ce180c3103e36ee6a122303fe20173baac5310.exe
Resource
win7-20220812-en
General
-
Target
cd73f6562e0e4d49a8fe056772ce180c3103e36ee6a122303fe20173baac5310
-
Size
284KB
-
MD5
8ac5bd7b6012be46799fd8ab25fb6390
-
SHA1
7f5542064ba7fe1fa2e44d259f576b2054915f47
-
SHA256
cd73f6562e0e4d49a8fe056772ce180c3103e36ee6a122303fe20173baac5310
-
SHA512
8612c8515324f7a93ce94515690a46067a8754fa2a874074181ee68c33e025449cd5867be620710e53ae1a0bf47fc70cbe4f9e80c5880c21a86c7a70c2a52ff1
-
SSDEEP
6144:pNNaI9Q51BCwYdKxpqNELJXYM+Ab6Rye2k6YDq5cPNEjoeF:pNNlefCwpqNERYM3PM3qAEjoG
Malware Config
Signatures
Files
-
cd73f6562e0e4d49a8fe056772ce180c3103e36ee6a122303fe20173baac5310.exe windows x86
cd4ae4e2c89b0e8adefc989d51aab011
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
StrCSpnA
SHRegCloseUSKey
StrFormatByteSizeW
PathGetDriveNumberA
PathIsPrefixW
UrlCombineW
SHGetValueW
ChrCmpIW
PathSkipRootW
PathIsSystemFolderW
SHDeleteValueW
PathRemoveBackslashA
StrStrIA
PathIsPrefixA
UrlCreateFromPathA
PathIsDirectoryA
StrCmpNIW
PathCombineA
UrlIsOpaqueA
SHRegQueryUSValueA
StrPBrkA
wininet
InternetGoOnline
FtpCreateDirectoryA
FtpFindFirstFileA
FindFirstUrlCacheContainerW
FtpSetCurrentDirectoryA
HttpOpenRequestA
SetUrlCacheConfigInfoW
HttpSendRequestExW
CommitUrlCacheEntryA
UnlockUrlCacheEntryStream
RunOnceUrlCache
InternetFindNextFileW
FtpCreateDirectoryW
GetUrlCacheConfigInfoA
HttpOpenRequestW
imm32
ImmInstallIMEA
ImmGetGuideLineW
ImmGetOpenStatus
ImmUnregisterWordW
ImmGetCompositionStringA
ImmEnumRegisterWordA
ImmGetIMCCLockCount
ImmUnlockIMCC
ImmGetDescriptionA
ImmEnumRegisterWordW
ImmSetOpenStatus
ImmInstallIMEW
ImmGetCandidateWindow
ImmSetCompositionWindow
ImmSetConversionStatus
ImmIsUIMessageW
mpr
WNetGetNetworkInformationW
WNetGetResourceInformationA
WNetAddConnection3W
WNetCloseEnum
WNetGetUserA
WNetDisconnectDialog
WNetGetLastErrorA
MultinetGetConnectionPerformanceW
WNetGetProviderNameW
WNetCancelConnectionW
WNetAddConnection2W
WNetGetResourceParentW
WNetCancelConnection2A
mscms
AssociateColorProfileWithDeviceW
IsColorProfileTagPresent
CreateMultiProfileTransform
GetStandardColorSpaceProfileA
RegisterCMMA
DisassociateColorProfileFromDeviceW
TranslateColors
CheckBitmapBits
UnregisterCMMW
kernel32
GetProcessHeap
LCMapStringW
GetStringTypeW
SetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
MultiByteToWideChar
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
HeapSize
HeapReAlloc
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetFilePointerEx
CreateFileW
CloseHandle
WriteConsoleW
DecodePointer
RaiseException
GetFileType
SetUnhandledExceptionFilter
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
HeapAlloc
HeapFree
GetModuleHandleExW
ExitProcess
GetModuleFileNameW
WriteFile
GetStdHandle
LoadLibraryExW
GetProcAddress
FreeLibrary
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LeaveCriticalSection
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RtlUnwind
GetLastError
SetLastError
EnterCriticalSection
Sections
.text Size: 124KB - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gfids Size: 512B - Virtual size: 176B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ