Static task
static1
Behavioral task
behavioral1
Sample
9257e634859e8b982e6d95ba3612a1c39b0ec4d4de50fa9df3febba40be8532b.exe
Resource
win7-20220812-en
General
-
Target
9257e634859e8b982e6d95ba3612a1c39b0ec4d4de50fa9df3febba40be8532b
-
Size
4.2MB
-
MD5
8ddf424a0b08ade1b8556b91dd382dc1
-
SHA1
39401064c152f8b8a9df2588c585df22582afecd
-
SHA256
9257e634859e8b982e6d95ba3612a1c39b0ec4d4de50fa9df3febba40be8532b
-
SHA512
3689e3565db4d3b34fe7def4c93aa3e0351ce181eef819c1d9609505dc05e10ae398def3479e93772be0f685ad91603e2c47ea33c876f1f58beb0dcbb76c9c87
-
SSDEEP
98304:LzOmUh3U9elPk+bHtYtRYN5v8ebnnZ4+MRc/EtDqgVFVVFK:+FhKd+a25vXnZdUcskglT
Malware Config
Signatures
Files
-
9257e634859e8b982e6d95ba3612a1c39b0ec4d4de50fa9df3febba40be8532b.exe windows x86
f44dae77839efff03fccb7fbd62291c4
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersion
GetVersionExA
GetCurrentProcess
LocalAlloc
GetCurrentProcess
GetCurrentThread
LocalFree
GetModuleFileNameW
GetProcessAffinityMask
SetProcessAffinityMask
SetThreadAffinityMask
Sleep
ExitProcess
GetLastError
FreeLibrary
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
CopyAcceleratorTableA
CharUpperBuffW
gdi32
BitBlt
msimg32
AlphaBlend
winspool.drv
OpenPrinterA
advapi32
RegEnumKeyA
RegQueryValueExA
OpenSCManagerW
EnumServicesStatusExW
OpenServiceW
QueryServiceConfigW
CloseServiceHandle
shell32
SHGetMalloc
comctl32
InitCommonControlsEx
shlwapi
PathFindFileNameA
uxtheme
EndBufferedPaint
dwmapi
DwmSetWindowAttribute
ole32
CreateILockBytesOnHGlobal
oleaut32
SysAllocString
oledlg
ord8
gdiplus
GdipDrawImageI
oleacc
AccessibleObjectFromWindow
imm32
ImmGetContext
winmm
PlaySoundA
wtsapi32
WTSSendMessageW
Sections
.text Size: - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 297KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 304KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.hd0 Size: - Virtual size: 3.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.hd1 Size: 4.1MB - Virtual size: 4.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 256B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 120KB - Virtual size: 120KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ