Static task
static1
Behavioral task
behavioral1
Sample
f64ab0940d52b1429b7249198e8c9aae8d98e2163ecd034f56cff462dfd5e88f.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
f64ab0940d52b1429b7249198e8c9aae8d98e2163ecd034f56cff462dfd5e88f.exe
Resource
win10v2004-20230220-en
General
-
Target
f64ab0940d52b1429b7249198e8c9aae8d98e2163ecd034f56cff462dfd5e88f
-
Size
681KB
-
MD5
714dd4ace747ce23d5f5e85da9143c03
-
SHA1
ad1fcd11dcb9556b35a2a1b810adf07f8a1e8b9d
-
SHA256
f64ab0940d52b1429b7249198e8c9aae8d98e2163ecd034f56cff462dfd5e88f
-
SHA512
b83968426e85d007b919ca456371f55be2a9cbc8d227efb13ad76c3124f7eb3688e7f752b7c62d0ec21744d96a8cb8883ce1e80268c1e780bd900ee86b75832d
-
SSDEEP
12288:B7xnXHpK5soEC7IdG1TyVnl2lfzL79EKIoNDfVh:RJXHpGs7CTCnl2hzL7OlCT
Malware Config
Signatures
Files
-
f64ab0940d52b1429b7249198e8c9aae8d98e2163ecd034f56cff462dfd5e88f.exe windows x86
786e0801d83dd0bf6f4f8a807130ab2e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleFileNameA
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
GetComputerNameA
GetVersionExA
GetLogicalDriveStringsA
GetCurrentProcess
GetModuleHandleA
GetLocalTime
GetFileSize
CreateFileW
InterlockedDecrement
CreateProcessA
GetCurrentProcessId
WaitForSingleObject
CreateMutexA
GetVersion
GetExitCodeProcess
SetUnhandledExceptionFilter
GetCurrentThreadId
CreateDirectoryW
DeleteFileW
FindClose
FindNextFileW
FindFirstFileW
TerminateProcess
OpenProcess
GetDriveTypeA
GetTempPathA
SetFileAttributesA
CopyFileA
lstrlenW
HeapFree
GetProcessHeap
FindResourceA
SizeofResource
LockResource
LoadResource
FindResourceExA
lstrlenA
HeapReAlloc
HeapAlloc
SetConsoleMode
ReadConsoleInputA
CreateDirectoryA
GetModuleFileNameW
LoadLibraryW
DeviceIoControl
FreeLibrary
lstrcmpA
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
LoadLibraryA
SetEndOfFile
GetLocaleInfoW
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetProcAddress
MultiByteToWideChar
CreateMutexW
ReleaseMutex
Sleep
WideCharToMultiByte
FormatMessageA
GetLastError
SetFilePointer
ReadFile
CreateFileA
WriteFile
InitializeCriticalSectionAndSpinCount
VirtualQuery
SetStdHandle
FlushFileBuffers
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStringTypeW
GetStringTypeA
VirtualAlloc
VirtualFree
HeapCreate
GetConsoleMode
GetConsoleCP
ExitProcess
IsValidCodePage
GetOEMCP
GetACP
SetLastError
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetModuleHandleW
SetConsoleCtrlHandler
GetCPInfo
LCMapStringW
LCMapStringA
GetStartupInfoA
GetCommandLineA
IsDebuggerPresent
UnhandledExceptionFilter
CreateThread
ExitThread
RtlUnwind
QueryPerformanceCounter
GlobalMemoryStatus
CloseHandle
DeleteFileA
GetStdHandle
FlushConsoleInputBuffer
GetTickCount
GetSystemTimeAsFileTime
GetLogicalDrives
OutputDebugStringA
RaiseException
HeapSize
HeapDestroy
InterlockedIncrement
user32
GetWindowRect
SystemParametersInfoA
GetParent
GetWindowLongA
GetDlgItemTextA
EndDialog
SendMessageA
SetFocus
GetDlgItem
SetForegroundWindow
KillTimer
SetTimer
LoadIconA
wsprintfW
BroadcastSystemMessageA
MessageBoxA
GetWindow
wsprintfA
SetWindowPos
GetClientRect
MapWindowPoints
DialogBoxParamA
advapi32
RegCreateKeyExA
RegOpenKeyExA
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
AllocateAndInitializeSid
CheckTokenMembership
FreeSid
RegSetValueExA
RegQueryValueExA
RegCloseKey
shell32
SHFileOperationA
ShellExecuteExA
ole32
OleRun
CoInitializeEx
CoUninitialize
CoSetProxyBlanket
CoCreateInstance
CoInitialize
oleaut32
SysAllocStringLen
SysFreeString
SysAllocString
VariantInit
VariantClear
ws2_32
WSACleanup
inet_ntoa
gethostbyname
gethostname
WSAStartup
closesocket
WSACloseEvent
WSAGetLastError
WSASend
WSAResetEvent
freeaddrinfo
WSASetLastError
getaddrinfo
WSASocketA
WSAEnumNetworkEvents
WSAConnect
WSAEventSelect
WSASetEvent
WSACreateEvent
WSARecv
inet_addr
WSAGetOverlappedResult
shlwapi
PathFileExistsA
setupapi
SetupDiDestroyDeviceInfoList
SetupDiGetClassDevsA
SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInterfaceDetailA
CM_Get_Child
CM_Get_Device_IDA
CM_Get_Sibling
iphlpapi
GetAdaptersInfo
version
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA
dbghelp
MiniDumpWriteDump
psapi
GetModuleFileNameExW
wininet
DeleteUrlCacheEntry
InternetReadFile
HttpQueryInfoA
HttpSendRequestA
Sections
.text Size: 530KB - Virtual size: 529KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 99KB - Virtual size: 99KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 38KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ