Static task
static1
Behavioral task
behavioral1
Sample
9e1630792db26cc32ddde69d885d8f5e3c1ef73e490e09f6237604b2da5b0b72.exe
Resource
win7-20220414-en
Behavioral task
behavioral2
Sample
9e1630792db26cc32ddde69d885d8f5e3c1ef73e490e09f6237604b2da5b0b72.exe
Resource
win10v2004-20220414-en
General
-
Target
9e1630792db26cc32ddde69d885d8f5e3c1ef73e490e09f6237604b2da5b0b72
-
Size
123KB
-
MD5
01e061ad01a49b177cf0d7a2e862335d
-
SHA1
657bcd20ee60d7739a747f37de2c29a7a163fa5f
-
SHA256
9e1630792db26cc32ddde69d885d8f5e3c1ef73e490e09f6237604b2da5b0b72
-
SHA512
3fdc76cbf793d1dbbb42b16aa0c0cf0e823bc04faa8fd6afda423dec5f521614a2d49db9a0e5074e66169c5e140aeb0a81a9cf6fcd93b466d95ed96c3fd2e9e3
-
SSDEEP
1536:doadZNP9vbL2fz/HzjIntD74PHEZntQN74AoRRybJ10WNNol/xGuH5d+wH:doaXNZLxtvZtQN7roRIpXru/+wH
Malware Config
Signatures
Files
-
9e1630792db26cc32ddde69d885d8f5e3c1ef73e490e09f6237604b2da5b0b72.exe windows x86
e53d47afaf337594f8ae4a21112a8076
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
AppendMenuW
NotifyWinEvent
GetMenuDefaultItem
GetWindowTextLengthW
WaitForInputIdle
MapVirtualKeyW
GetLastActivePopup
GetMenuCheckMarkDimensions
IsCharUpperA
GetAsyncKeyState
GetMenuItemCount
IsCharAlphaW
GetNextDlgTabItem
ShowWindow
shell32
ShellExecuteExW
ole32
OleSetClipboard
gdi32
TextOutW
PatBlt
kernel32
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetLocaleInfoA
MultiByteToWideChar
HeapSize
TlsGetValue
GetProcessAffinityMask
GetThreadPriorityBoost
VirtualQuery
WriteFile
WaitForSingleObject
GlobalReAlloc
GetModuleHandleA
FileTimeToLocalFileTime
LocalAlloc
GlobalUnlock
ConvertFiberToThread
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoA
GetProcAddress
ExitProcess
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
IsDebuggerPresent
LoadLibraryA
InitializeCriticalSection
GetCPInfo
GetACP
GetOEMCP
Sleep
VirtualAlloc
HeapReAlloc
RtlUnwind
Sections
.text Size: 43KB - Virtual size: 42KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 69KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ