Static task
static1
Behavioral task
behavioral1
Sample
8747ce656fe657e621a82c17fe6640145c4e4f2d8f90e255cda0a68e6f341c22.exe
Resource
win7-20230220-en
General
-
Target
9469028283.zip
-
Size
173KB
-
MD5
6dd1588d9cd1afc69fc87ea00e5d5e2d
-
SHA1
2b4972f399925d6190253c5e9256c591a0ba1dc8
-
SHA256
97603de51b5cce9e075730333f65485f42244aaf2a0f7e57d361c814fb813574
-
SHA512
1643d65369249527110bc73c41f5c2e657d3fdadda23518c0df44107137328c108a2cdbad606de299312849fd15eb3e2d93f8b296504a78e4c9e34fa05fd2541
-
SSDEEP
3072:Mc7qCDrENPxtuHGdc4JY3B1CUQK/ihU/qC6evsjh3hGc4q8bNASUfWG0VCNDvKj6:X7XExRdcYqlsBChA3hGDNjCZvKwPMleX
Malware Config
Signatures
Files
-
9469028283.zip.zip
Password: infected
-
8747ce656fe657e621a82c17fe6640145c4e4f2d8f90e255cda0a68e6f341c22.exe windows x86
ca7db7c4adf05e320e942c97d0814c19
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleW
GetUserDefaultLCID
GetProcAddress
SizeofResource
GlobalSize
LockResource
GlobalAlloc
FindResourceExW
LoadResource
FindResourceW
GlobalLock
GlobalUnlock
Sleep
WriteConsoleW
SetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
GetACP
DeleteCriticalSection
HeapDestroy
DecodePointer
HeapAlloc
HeapReAlloc
GetLastError
HeapSize
InitializeCriticalSectionEx
LeaveCriticalSection
GetProcessHeap
GetModuleFileNameW
EnterCriticalSection
IsValidCodePage
ReadConsoleW
ReadFile
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
GetFileType
SetFilePointerEx
GetFileSizeEx
EnumSystemLocalesW
IsValidLocale
GetLocaleInfoW
LCMapStringW
WriteFile
GetStdHandle
VirtualQuery
VirtualProtect
VirtualAlloc
GetSystemInfo
GetModuleHandleExW
ExitProcess
LoadLibraryExW
FreeLibrary
TlsFree
TlsSetValue
TlsGetValue
GetPhysicallyInstalledSystemMemory
HeapFree
LocalFree
FormatMessageA
GetLocaleInfoEx
CreateFileW
FindClose
FindFirstFileW
FindFirstFileExW
FindNextFileW
GetFileAttributesExW
SetFileInformationByHandle
AreFileApisANSI
CloseHandle
GetFileInformationByHandleEx
MultiByteToWideChar
WideCharToMultiByte
EncodePointer
LCMapStringEx
CompareStringEx
GetCPInfo
GetStringTypeW
IsDebuggerPresent
OutputDebugStringW
RaiseException
InitializeCriticalSectionAndSpinCount
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlUnwind
SetLastError
TlsAlloc
SetEndOfFile
user32
ReleaseDC
GetDC
GetSystemMetrics
EnumDisplayDevicesW
GetWindowRect
GetDesktopWindow
gdi32
CreateCompatibleBitmap
SelectObject
CreateCompatibleDC
StretchBlt
GetDIBits
GetObjectW
SetStretchBltMode
DeleteObject
DeleteDC
advapi32
GetCurrentHwProfileW
shell32
SHGetKnownFolderPath
ole32
CoTaskMemFree
CLSIDFromString
CreateStreamOnHGlobal
GetHGlobalFromStream
shlwapi
PathFindExtensionW
gdiplus
GdiplusShutdown
GdiplusStartup
GdipGetImageEncoders
GdipCloneImage
GdipAlloc
GdipCreateBitmapFromHBITMAP
GdipCreateBitmapFromScan0
GdipSaveImageToStream
GdipGetImageEncodersSize
GdipFree
GdipDisposeImage
GdipSaveImageToFile
ws2_32
inet_pton
htons
connect
socket
closesocket
WSACleanup
recv
send
WSAStartup
crypt32
CryptUnprotectData
Sections
.text Size: 233KB - Virtual size: 232KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 78KB - Virtual size: 78KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ