Static task
static1
Behavioral task
behavioral1
Sample
c61050d166ed422c53800da690915cc60ae3a7d135d61fa01ffcd3647be09d6e.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c61050d166ed422c53800da690915cc60ae3a7d135d61fa01ffcd3647be09d6e.exe
Resource
win10v2004-20221111-en
General
-
Target
c61050d166ed422c53800da690915cc60ae3a7d135d61fa01ffcd3647be09d6e
-
Size
844KB
-
MD5
85d492c1421beb7d78e573d73aa476fc
-
SHA1
1f8c71d4ade70d3fa401f84101d48489f6fc88d9
-
SHA256
c61050d166ed422c53800da690915cc60ae3a7d135d61fa01ffcd3647be09d6e
-
SHA512
29a9f6f131be987fd1f710a6360694616c21bc214d6f5155c71a3e7a78b6d0c66ab99e983a22d6bd323d8c5a1260f6ddd8fbf502cbe2c1af2bcbf9944a4b9dce
-
SSDEEP
12288:fYiluA9X7hDSy2CkMxGpRW03qTkOp6Bc1xrzLQ4JiYuvgn8CTGMWbeTSVkYncHP4:QiHzsexGKp0V9vTyqJROXGcPJk3
Malware Config
Signatures
Files
-
c61050d166ed422c53800da690915cc60ae3a7d135d61fa01ffcd3647be09d6e.exe windows x86
5996a4ced04ff6a3e47737481ef8795f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shfolder
SHGetFolderPathA
kernel32
LeaveCriticalSection
InitializeCriticalSection
GlobalFree
GlobalHandle
GetModuleHandleA
IsDBCSLeadByte
GetPrivateProfileStringA
WriteConsoleA
FlushConsoleInputBuffer
GetStdHandle
CreateFileA
AllocConsole
FreeConsole
ReadFile
SetConsoleMode
GetConsoleMode
GetConsoleScreenBufferInfo
GetTickCount
GetCurrentDirectoryA
GetTempPathA
SetFileTime
LocalFileTimeToFileTime
SystemTimeToFileTime
GetFullPathNameA
RemoveDirectoryA
FindClose
FindNextFileA
SetFileAttributesA
FindFirstFileA
CreateDirectoryA
GetFileAttributesA
CreateSemaphoreA
ReleaseSemaphore
GetWindowsDirectoryA
GetVersion
GetShortPathNameA
CopyFileA
GetLocalTime
GetPrivateProfileIntA
WritePrivateProfileStringA
WriteProfileSectionA
GetProfileSectionA
GetSystemDirectoryA
GetVersionExA
WriteFile
WinExec
GetTempFileNameA
WaitForSingleObjectEx
CreateProcessA
OpenEventA
LocalFree
FormatMessageA
GetSystemTime
SetFilePointer
GetFileSize
OutputDebugStringA
HeapAlloc
GetProcessHeap
GetCurrentProcessId
IsBadCodePtr
GetExitCodeThread
CreateThread
FreeResource
EnterCriticalSection
CreateFileMappingA
UnmapViewOfFile
LoadLibraryA
InterlockedExchange
InterlockedDecrement
InterlockedIncrement
GetModuleFileNameA
SetEnvironmentVariableA
GetConsoleOutputCP
IsValidLocale
EnumSystemLocalesA
MulDiv
QueryPerformanceCounter
GetEnvironmentStrings
FreeEnvironmentStringsA
GetOEMCP
SetHandleCount
GetFileType
SetStdHandle
FlushFileBuffers
GetTimeZoneInformation
HeapSize
GetConsoleCP
HeapCreate
HeapDestroy
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetStringTypeA
LCMapStringA
GetStartupInfoA
GetCommandLineA
ExitProcess
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetSystemTimeAsFileTime
SetEndOfFile
GetDriveTypeA
FileTimeToLocalFileTime
VirtualQuery
GetSystemInfo
VirtualProtect
HeapReAlloc
ExitThread
RtlUnwind
GetFileTime
FileTimeToSystemTime
GlobalFindAtomA
GlobalAddAtomA
GlobalDeleteAtom
VirtualAlloc
VirtualFree
IsProcessorFeaturePresent
HeapFree
InterlockedCompareExchange
GetThreadLocale
GetLocaleInfoA
GetACP
lstrcmpA
CompareStringA
lstrlenA
lstrcpyA
lstrcmpiA
GetCurrentProcess
FlushInstructionCache
GetLastError
GlobalAlloc
GlobalLock
GlobalUnlock
SetLastError
RaiseException
FindResourceA
LoadResource
LockResource
SizeofResource
SuspendThread
ResumeThread
TerminateThread
GetCurrentThreadId
DeleteFileA
LoadLibraryExA
FreeLibrary
Sleep
DeleteCriticalSection
WaitForSingleObject
ResetEvent
SetEvent
CloseHandle
CreateEventA
MapViewOfFile
GetUserDefaultLCID
user32
MessageBoxA
GetActiveWindow
UnregisterClassA
DefWindowProcA
GetSysColor
GetWindowRect
ShowWindow
LoadImageA
GetSystemMetrics
PostQuitMessage
SetWindowTextA
GetWindowTextA
SetActiveWindow
SetForegroundWindow
PostMessageA
IsIconic
GetUpdateRect
CopyRect
OemToCharA
CharToOemA
LoadStringA
ExitWindowsEx
CreateDialogIndirectParamA
ClientToScreen
MoveWindow
CreateAcceleratorTableA
GetDesktopWindow
RedrawWindow
DestroyAcceleratorTable
IsWindowVisible
DrawFocusRect
DrawStateA
FillRect
ReleaseDC
GetDC
EndPaint
FindWindowA
DispatchMessageA
TranslateMessage
GetMessageA
PeekMessageA
DestroyWindow
SendMessageA
DialogBoxParamA
EndDialog
GetWindow
GetParent
GetFocus
MapDialogRect
CreateWindowExA
SetWindowPos
ScreenToClient
SetTimer
KillTimer
IsChild
GetDlgItem
SetWindowContextHelpId
IsDialogMessageA
IsWindow
MapWindowPoints
GetClientRect
SystemParametersInfoA
SetCursor
PtInRect
UpdateWindow
InvalidateRect
SetCapture
InvalidateRgn
SetFocus
ReleaseCapture
BeginPaint
DrawTextA
RegisterWindowMessageA
GetClassInfoExA
RegisterClassExA
OffsetRect
CharNextA
GetDlgCtrlID
IsWindowEnabled
GetWindowTextLengthA
GetClassNameA
LoadCursorA
GetCursorPos
SetRectEmpty
SetRect
GetCapture
gdi32
CreateCompatibleDC
CreateCompatibleBitmap
CreateSolidBrush
GetDeviceCaps
DeleteObject
CreateFontIndirectA
GetStockObject
GetObjectA
DeleteDC
SelectObject
SetBkMode
SetTextColor
BitBlt
advapi32
SetFileSecurityA
GetTokenInformation
AllocateAndInitializeSid
EqualSid
FreeSid
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
RegQueryInfoKeyA
SetSecurityDescriptorDacl
RegEnumKeyExA
RegDeleteValueA
RegDeleteKeyA
RegSetValueExA
RegQueryValueExA
RegCloseKey
RegOpenKeyExA
InitializeSecurityDescriptor
RegCreateKeyExA
SetEntriesInAclA
shell32
ShellExecuteA
ole32
CLSIDFromProgID
OleRun
CoTaskMemRealloc
CoTaskMemFree
OleLockRunning
CoTaskMemAlloc
StringFromGUID2
CLSIDFromString
CoUninitialize
CoGetClassObject
OleInitialize
OleUninitialize
CreateStreamOnHGlobal
CoCreateInstance
CoInitializeEx
CoInitialize
oleaut32
SysStringByteLen
OleCreateFontIndirect
LoadRegTypeLi
VariantClear
VarUI4FromStr
OleLoadPicture
VariantInit
SysAllocString
SysStringLen
SysAllocStringLen
LoadTypeLi
GetErrorInfo
SysFreeString
shlwapi
PathFileExistsA
comctl32
_TrackMouseEvent
InitCommonControlsEx
mpr
WNetGetProviderNameA
WNetUseConnectionA
ws2_32
gethostbyname
WSACleanup
WSASendTo
WSARecvFrom
ioctlsocket
WSAAccept
listen
bind
inet_ntoa
WSASend
WSAEnumNetworkEvents
WSARecv
shutdown
WSAEventSelect
WSAWaitForMultipleEvents
htonl
ntohs
send
ntohl
recv
htons
connect
WSASocketA
setsockopt
inet_addr
sendto
recvfrom
WSAStartup
socket
closesocket
WSAGetLastError
urlmon
URLDownloadToFileA
netapi32
Netbios
Sections
.text Size: 604KB - Virtual size: 600KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 96KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 120KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ