?ThreadA@@YGXK@Z
Static task
static1
Behavioral task
behavioral1
Sample
9f33ff385ce2315a281f55ff7dc05b526092fd7d86f8e907c11ff4f3ed6f027f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9f33ff385ce2315a281f55ff7dc05b526092fd7d86f8e907c11ff4f3ed6f027f.exe
Resource
win10v2004-20220812-en
General
-
Target
9f33ff385ce2315a281f55ff7dc05b526092fd7d86f8e907c11ff4f3ed6f027f
-
Size
145KB
-
MD5
67e83f630b500efa98813545b22e54ec
-
SHA1
e7e1d8e199d126a3fd3131b2ba8d7f97b2e24591
-
SHA256
9f33ff385ce2315a281f55ff7dc05b526092fd7d86f8e907c11ff4f3ed6f027f
-
SHA512
01a7be00ec350196b8722df2ecb498980240614e45854bb46128f1173352a26a57636db2f4f784861f2c75de745c098c8c32fc8d2df4c056d37454789dd23d04
-
SSDEEP
3072:My4EaMs3jcx3y5ao3DEEj8s8a0hE/uyoXEkfuTfvQYNlQWZmENuFjw61AI:Mfxt3Q35Ej83XQgYRuN
Malware Config
Signatures
Files
-
9f33ff385ce2315a281f55ff7dc05b526092fd7d86f8e907c11ff4f3ed6f027f.exe windows x86
e7449bc5d182c609c60e8025f37d40b8
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
IsCharUpperW
kernel32
GetStartupInfoW
GetShortPathNameA
GetSystemTimeAdjustment
DisconnectNamedPipe
TlsSetValue
GetSystemDirectoryA
CreateSemaphoreW
SetFileApisToOEM
SleepEx
GetWindowsDirectoryA
GetOEMCP
GetTempPathA
TerminateThread
PulseEvent
FormatMessageW
CreateDirectoryA
ExitThread
FoldStringW
LoadLibraryExW
GetNumberFormatW
GlobalFlags
SetCommState
GetCurrentThreadId
DeleteCriticalSection
GetFileAttributesA
RaiseException
SetTimerQueueTimer
GetCurrentDirectoryW
GetLastError
CompareStringA
EnumResourceTypesA
GetUserDefaultUILanguage
ClearCommError
MoveFileExA
OpenSemaphoreW
FileTimeToLocalFileTime
GetModuleHandleW
SuspendThread
GetStdHandle
ReleaseMutex
LocalFree
SystemTimeToFileTime
FindResourceExW
CancelWaitableTimer
GlobalGetAtomNameW
GetAtomNameW
GetTickCount
CreateMailslotW
WaitForMultipleObjectsEx
GetSystemTime
CloseHandle
GlobalAlloc
DeleteAtom
GlobalFree
CreateEventW
GetModuleFileNameA
ConvertDefaultLocale
CopyFileW
EnumSystemLocalesA
GetLocaleInfoA
FlushViewOfFile
lstrcmpA
FlushFileBuffers
SetThreadLocale
FindFirstFileA
FindResourceW
GetSystemDefaultUILanguage
GlobalAddAtomA
FindResourceA
GetFileType
SetCurrentDirectoryW
GetAtomNameA
TransactNamedPipe
GlobalDeleteAtom
FileTimeToDosDateTime
WinExec
VerifyVersionInfoW
WaitForSingleObjectEx
GetCommandLineA
EnterCriticalSection
QueryDosDeviceW
SetSystemTime
OpenEventW
SetFileTime
GetBinaryTypeW
GetTimeFormatW
InitializeCriticalSection
HeapUnlock
LockFile
LocalReAlloc
SetErrorMode
GetOverlappedResult
FindNextFileW
IsDBCSLeadByte
GetPriorityClass
GetSystemInfo
GetSystemTimeAsFileTime
OpenEventA
MapViewOfFile
RegisterWaitForSingleObject
GlobalMemoryStatusEx
GetFullPathNameA
SetWaitableTimer
GetFullPathNameW
FindClose
CreateFileMappingA
GetSystemWindowsDirectoryW
CancelIo
RemoveDirectoryW
DuplicateHandle
GetCommProperties
GetThreadTimes
GetComputerNameA
FindNextFileA
MoveFileW
SetLocalTime
EscapeCommFunction
GlobalFindAtomW
GetProcAddress
GetUserDefaultLangID
HeapReAlloc
CreateNamedPipeA
lstrcpyA
CreateWaitableTimerW
GetVersionExW
UnhandledExceptionFilter
CreatePipe
VirtualFree
SetNamedPipeHandleState
VirtualProtect
LoadResource
IsDBCSLeadByteEx
GetWindowsDirectoryW
HeapSize
CreateMutexA
CompareStringW
LeaveCriticalSection
GetACP
GetCommandLineW
CreateSemaphoreA
GlobalUnlock
LCMapStringW
GlobalReAlloc
CreateWaitableTimerA
HeapWalk
GetHandleInformation
HeapLock
GetFileAttributesW
FindNextChangeNotification
SetThreadAffinityMask
LockResource
TryEnterCriticalSection
GlobalCompact
HeapValidate
ReleaseSemaphore
GetFileTime
OpenFileMappingA
SetupComm
GetFileAttributesExW
GetComputerNameExA
lstrcatW
ResetEvent
SetCommMask
GetTempFileNameA
shlwapi
PathGetArgsW
Exports
Exports
Sections
.text Size: 69KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.inter Size: 512B - Virtual size: 88B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ndkie Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.soper Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ