Static task
static1
Behavioral task
behavioral1
Sample
9D68E9449BCF593ABFD4562466A7CC2D35B1C33868E3B.exe
Resource
win7-20220715-en
General
-
Target
9D68E9449BCF593ABFD4562466A7CC2D35B1C33868E3B.exe
-
Size
6.0MB
-
MD5
5c0be4a5273dec6b3ebb180a90f337f2
-
SHA1
3a82216a89310aa7b4cee1e58a3af7e16c0cce19
-
SHA256
9d68e9449bcf593abfd4562466a7cc2d35b1c33868e3bcf0e47bda4d9fc78403
-
SHA512
4e922ede66f69d3eb3f6baac3db20b0675df36ec60fd1d940c80e772b5fa28f8d85c68f9e1aa4d89a552d802ade54f762004f0e0eb2ed4b4f8dee8b6cbd0becc
-
SSDEEP
98304:eBjMi36z9cT7q3gW4Rvv9Fb+syu2d3Yz1CXlfPdZK9KYLVFwUx900dqo12o:KBKziT7q3/4Bb+sLW2CXlfS1J1jDqk2o
Malware Config
Signatures
Files
-
9D68E9449BCF593ABFD4562466A7CC2D35B1C33868E3B.exe.exe windows x86
db02dfb25ff995ca2ccf9caf737ffcc9
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapCompact
SetPriorityClass
lstrlenA
GetDriveTypeW
BuildCommDCBAndTimeoutsA
FreeLibrary
SystemTimeToTzSpecificLocalTime
GetQueuedCompletionStatus
GetCommState
SetEnvironmentVariableW
CreateJobObjectW
GetNamedPipeHandleStateA
CallNamedPipeW
WriteFile
SetCommState
SetProcessPriorityBoost
TlsSetValue
ActivateActCtx
GlobalAlloc
LoadLibraryW
GetConsoleMode
CopyFileW
_hread
GetPrivateProfileStructW
GetVersionExW
IsDBCSLeadByte
lstrcatA
GetBinaryTypeW
GetOverlappedResult
SetDefaultCommConfigA
RaiseException
GetNamedPipeHandleStateW
GetConsoleOutputCP
SetLastError
GetTapeStatus
VirtualAlloc
BeginUpdateResourceW
IsValidCodePage
GetConsoleDisplayMode
EnterCriticalSection
LoadLibraryA
AddAtomW
PostQueuedCompletionStatus
GetPrivateProfileSectionNamesA
GetOEMCP
EnumDateFormatsA
GetThreadPriority
DebugBreakProcess
CreateMutexA
RequestWakeupLatency
VirtualProtect
GetCurrentDirectoryA
LocalSize
AddConsoleAliasA
CopyFileExA
CommConfigDialogW
CompareStringW
CompareStringA
GetACP
GetComputerNameA
InterlockedIncrement
InterlockedDecrement
Sleep
InterlockedExchange
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetLastError
HeapFree
TerminateProcess
GetCurrentProcess
IsDebuggerPresent
HeapReAlloc
HeapAlloc
GetCommandLineA
GetStartupInfoA
RtlUnwind
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringW
GetCPInfo
GetModuleHandleW
GetProcAddress
ExitProcess
SetConsoleCtrlHandler
GetStdHandle
GetModuleFileNameA
HeapCreate
HeapDestroy
VirtualFree
FatalAppExitA
TlsGetValue
TlsAlloc
TlsFree
GetCurrentThreadId
GetCurrentThread
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapSize
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetStringTypeA
GetStringTypeW
InitializeCriticalSectionAndSpinCount
GetTimeZoneInformation
GetLocaleInfoW
GetConsoleCP
FlushFileBuffers
SetFilePointer
CloseHandle
WriteConsoleA
WriteConsoleW
SetStdHandle
CreateFileA
SetEnvironmentVariableA
user32
GetAncestor
advapi32
ImpersonateSelf
Sections
.text Size: 143KB - Virtual size: 143KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 21KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5.7MB - Virtual size: 9.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 193B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ