Static task
static1
Behavioral task
behavioral1
Sample
9e803068b0df00f2681f79d31f27aee618cf65456aed57e3a8247995f4e2d4c0.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
9e803068b0df00f2681f79d31f27aee618cf65456aed57e3a8247995f4e2d4c0.exe
Resource
win10v2004-20220414-en
General
-
Target
9e803068b0df00f2681f79d31f27aee618cf65456aed57e3a8247995f4e2d4c0
-
Size
262KB
-
MD5
dfbcb56267bde1b0c5cd2e891c5f1444
-
SHA1
12c74bdb6d04cd4d40f469ae7193e49f862a3aee
-
SHA256
9e803068b0df00f2681f79d31f27aee618cf65456aed57e3a8247995f4e2d4c0
-
SHA512
66075ff634d9d92db61c3f86a5147920ac8e4b325c48227a2a0e96d88c334668153cd963c34fa3a267ceab09c356e4d5551a7c7ecbe20a996979fe4ab4b5abf1
-
SSDEEP
6144:LUrKE18Gp3A0rp4aNB2h4ilqnw/iZLI6NXY0wSdLL+Rt:AscJNOqw/iZL8YLi
Malware Config
Signatures
Files
-
9e803068b0df00f2681f79d31f27aee618cf65456aed57e3a8247995f4e2d4c0.exe windows x86
d710d7a6392cd446d1d4b057b3d30f0f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
memset
strcmp
memmove
longjmp
fopen
_setjmp3
fclose
malloc
free
memcpy
exit
__p__iob
fprintf
sprintf
fwrite
fflush
ferror
getenv
sscanf
kernel32
GetModuleHandleA
HeapCreate
LoadLibraryA
GetProcAddress
WriteProfileStringA
DefineDosDeviceA
ReleaseMutex
FindFirstChangeNotificationA
GetTapeStatus
FindResourceExA
GetConsoleTitleA
WritePrivateProfileSectionA
IsBadStringPtrA
GetTempFileNameA
GetProcessWorkingSetSize
SetConsoleCP
VirtualProtect
HeapDestroy
ExitProcess
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
FreeLibrary
HeapFree
CloseHandle
InitializeCriticalSection
GetModuleFileNameA
DeleteFileA
HeapAlloc
HeapReAlloc
winspool.drv
PrinterMessageBoxA
DeletePrintProvidorA
PrinterProperties
user32
MessageBeep
GetKBCodePage
CallWindowProcA
ShowWindowAsync
SetParent
PackDDElParam
GetKeyState
SendMessageCallbackA
SwapMouseButton
EnumWindowStationsA
gdi32
SetBkColor
RoundRect
GetPixelFormat
SetTextJustification
DeleteObject
comdlg32
PrintDlgA
advapi32
RegQueryValueA
RegDeleteKeyA
comctl32
InitCommonControlsEx
ole32
CoInitialize
imm32
ImmGetDefaultIMEWnd
netapi32
NetWkstaUserGetInfo
wininet
FtpGetCurrentDirectoryA
winmm
mciGetCreatorTask
Sections
.code Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 79KB - Virtual size: 78KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.per Size: 512B - Virtual size: 62B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 140KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 636B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ