Static task
static1
Behavioral task
behavioral1
Sample
9d7ef7a4805387e21d1c9488026dea78ce30f2617a683e8a7a8beb6be916a0a3.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9d7ef7a4805387e21d1c9488026dea78ce30f2617a683e8a7a8beb6be916a0a3.exe
Resource
win10v2004-20220812-en
General
-
Target
9d7ef7a4805387e21d1c9488026dea78ce30f2617a683e8a7a8beb6be916a0a3
-
Size
451KB
-
MD5
8bd786e51c13805c197efa19d3c1fff7
-
SHA1
ae04421cb055392b003ee9fd2b1063617ec23e23
-
SHA256
9d7ef7a4805387e21d1c9488026dea78ce30f2617a683e8a7a8beb6be916a0a3
-
SHA512
eca195bd3e4f5a4db01a2af010334522d8efaaa8ad1cb948dcf4923e537e53c335ef41d257fd85ed2690030f8687354121ffdd93f16c3435d7f7378cc2827ef6
-
SSDEEP
12288:cYQ14sXANr0RpZUEdm4aI7ear6nY4prP8ybeoreVmKVEpVyBbm3SBlUlWPsMnZaT:fsQ42A6Y4ltXreVmKKp6bmn/MZ7E
Malware Config
Signatures
Files
-
9d7ef7a4805387e21d1c9488026dea78ce30f2617a683e8a7a8beb6be916a0a3.exe windows x86
cc40efbbb440708955620a55d414d82c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CompareStringW
SetEnvironmentVariableW
HeapCreate
SetFilePointer
RtlUnwind
GetLastError
GetPrivateProfileIntW
GetCurrentProcess
GetCurrentThread
VirtualAlloc
InitializeCriticalSection
GetUserDefaultLCID
HeapReAlloc
FreeLibrary
lstrcmpi
FreeEnvironmentStringsW
lstrcpynW
HeapSize
GetModuleFileNameA
CompareStringA
GetFileType
ExitProcess
EnterCriticalSection
GetEnvironmentStringsW
WideCharToMultiByte
LoadLibraryA
GetTickCount
GetSystemTimeAsFileTime
GetDateFormatA
GetCurrentDirectoryA
GetStdHandle
QueryPerformanceCounter
SetHandleCount
LCMapStringA
FormatMessageA
IsValidCodePage
SetConsoleCtrlHandler
FindFirstFileExA
HeapAlloc
GetCPInfo
HeapFree
VirtualFree
TlsSetValue
GetCurrentProcessId
lstrcpynA
GetLocaleInfoA
UnhandledExceptionFilter
LeaveCriticalSection
GetStartupInfoA
FindResourceExA
EnumSystemLocalesA
GetLocaleInfoW
FindAtomW
Sleep
LCMapStringW
lstrcmpiW
FileTimeToSystemTime
TlsGetValue
TlsFree
SetUnhandledExceptionFilter
TlsAlloc
GetTempPathA
IsDebuggerPresent
WriteFile
ReadFile
SuspendThread
GetProcessHeap
GetProcAddress
FreeEnvironmentStringsA
GetACP
IsValidLocale
GetVersionExA
InterlockedExchange
GetStringTypeA
SetLastError
GetCommandLineA
VirtualQuery
SetEnvironmentVariableA
MultiByteToWideChar
UnmapViewOfFile
HeapDestroy
GetCurrentThreadId
GetTimeFormatA
InterlockedDecrement
TerminateProcess
DeleteCriticalSection
GetTimeZoneInformation
GetDiskFreeSpaceW
GetModuleHandleA
InterlockedIncrement
GetEnvironmentStrings
GetOEMCP
GetStringTypeW
user32
TranslateMDISysAccel
ChildWindowFromPointEx
AppendMenuA
RegisterClipboardFormatW
CheckMenuRadioItem
DefDlgProcA
CreateWindowExA
comdlg32
ChooseFontA
PageSetupDlgW
PrintDlgA
ReplaceTextW
GetSaveFileNameW
ChooseColorA
GetOpenFileNameW
ChooseColorW
GetFileTitleA
GetFileTitleW
GetOpenFileNameA
LoadAlterBitmap
FindTextW
Sections
.text Size: 125KB - Virtual size: 125KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 311KB - Virtual size: 310KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ