Static task
static1
Behavioral task
behavioral1
Sample
9682aba955b83b2f164225203c520682e8d5ed1b8054ffda47a88d1ad0f5c98e.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
9682aba955b83b2f164225203c520682e8d5ed1b8054ffda47a88d1ad0f5c98e.exe
Resource
win10v2004-20230220-en
General
-
Target
9682aba955b83b2f164225203c520682e8d5ed1b8054ffda47a88d1ad0f5c98e
-
Size
2.0MB
-
MD5
c4c1602ad8fe82647ec519831c84b00b
-
SHA1
3146799c142beb383138f559091a5c8a9e689952
-
SHA256
9682aba955b83b2f164225203c520682e8d5ed1b8054ffda47a88d1ad0f5c98e
-
SHA512
d4f05243f4514fce75eeea8ae559b470a3b2a87f2d3bd76677f8c2604c89b9f807d525030cb2b8876c7cc00f1d1cf8ea218c35ba270390293856f0245fe756a3
-
SSDEEP
24576:XrzTqEpwaRMjrRjt2EUzq2e+vGesHfqX1aYetPvE+5s9tMnnoRWeFNTSCZ:XbWaRirRBVo5eqsyX1UvE++Cno92
Malware Config
Signatures
Files
-
9682aba955b83b2f164225203c520682e8d5ed1b8054ffda47a88d1ad0f5c98e.exe windows x86
364079fd462ff39f8bea3703fba9e85d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WriteConsoleW
GetModuleFileNameW
OpenProcess
HeapSize
SetStdHandle
GetProcessHeap
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
CreateProcessW
HeapReAlloc
ReadConsoleW
ReadFile
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
SetFilePointerEx
GetFileSizeEx
LCMapStringW
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
GetOEMCP
GetACP
IsValidCodePage
GetFileType
TerminateProcess
ExitProcess
GetLastError
CloseHandle
WriteFile
CreateFileW
GetSystemTimeAsFileTime
GetModuleHandleA
FormatMessageW
VerSetConditionMask
GlobalFree
VerifyVersionInfoW
LocalFree
FormatMessageA
GetLocaleInfoEx
RaiseException
InitializeSRWLock
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
TryAcquireSRWLockExclusive
GetCurrentThreadId
InitializeConditionVariable
WakeConditionVariable
WakeAllConditionVariable
SleepConditionVariableSRW
WideCharToMultiByte
CreateDirectoryW
FindClose
FindFirstFileW
FindFirstFileExW
FindNextFileW
GetFileAttributesExW
AreFileApisANSI
GetModuleHandleW
GetProcAddress
GetFileInformationByHandleEx
MultiByteToWideChar
InitOnceBeginInitialize
InitOnceComplete
FreeLibraryWhenCallbackReturns
CreateThreadpoolWork
SubmitThreadpoolWork
CloseThreadpoolWork
GetModuleHandleExW
IsProcessorFeaturePresent
GetStringTypeW
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
QueryPerformanceCounter
EncodePointer
DecodePointer
LCMapStringEx
GetCPInfo
SetEvent
WaitForSingleObjectEx
GetCurrentProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetCurrentThread
GetThreadTimes
FreeLibrary
LoadLibraryExW
InitializeSListHead
SetLastError
CreateEventW
InitializeCriticalSectionAndSpinCount
ResetEvent
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
GetCurrentProcessId
RtlUnwind
GetStdHandle
HeapAlloc
HeapFree
advapi32
RegSetValueExW
RegOpenKeyExW
RegCreateKeyExW
RegCreateKeyExA
RegCloseKey
GetUserNameW
RegSetValueExA
RegQueryValueExW
bcrypt
BCryptDestroyHash
BCryptFinishHash
BCryptHashData
BCryptCreateHash
BCryptCloseAlgorithmProvider
BCryptGetProperty
BCryptOpenAlgorithmProvider
winhttp
WinHttpGetIEProxyConfigForCurrentUser
WinHttpGetProxyForUrl
WinHttpQueryHeaders
WinHttpReceiveResponse
WinHttpQueryAuthSchemes
WinHttpSetCredentials
WinHttpSendRequest
WinHttpAddRequestHeaders
WinHttpOpenRequest
WinHttpSetTimeouts
WinHttpSetOption
WinHttpQueryOption
WinHttpQueryDataAvailable
WinHttpWriteData
WinHttpReadData
WinHttpSetStatusCallback
WinHttpCloseHandle
WinHttpOpen
WinHttpGetDefaultProxyConfiguration
WinHttpConnect
crypt32
CryptUnprotectMemory
CertFreeCertificateContext
CertGetCertificateChain
CertFreeCertificateChain
CertVerifyCertificateChainPolicy
ole32
CoGetObjectContext
CoGetApartmentType
Sections
.text Size: 581KB - Virtual size: 580KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 132KB - Virtual size: 131KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 53KB - Virtual size: 59KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ