Static task
static1
Behavioral task
behavioral1
Sample
9a2e0e03bdc252842e6d69e9ec37fcae2a4e212c7db00058d6f67d2da2215e11.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9a2e0e03bdc252842e6d69e9ec37fcae2a4e212c7db00058d6f67d2da2215e11.exe
Resource
win10v2004-20220812-en
General
-
Target
9a2e0e03bdc252842e6d69e9ec37fcae2a4e212c7db00058d6f67d2da2215e11
-
Size
210KB
-
MD5
623aa707525474c66a020883e8db4313
-
SHA1
504600723f4aec192a5f62cb3a4f66165612695b
-
SHA256
9a2e0e03bdc252842e6d69e9ec37fcae2a4e212c7db00058d6f67d2da2215e11
-
SHA512
88572d1c780f9f9d0c4eb14385060ba53142aaca0d48d48420087f9cdc2f581ac4867141a589ffdeacb905ab8551c33b2e03dc996881eade90a181db7a57881b
-
SSDEEP
3072:BgAHyqJGtz0yuatgl8kSeZ6/GkFpAJHkJIzN2vozwhumHrUV+QXY7o232JxUMfnC:BHHymQz0TcGkFmN8HQoQXkgU5Ea
Malware Config
Signatures
Files
-
9a2e0e03bdc252842e6d69e9ec37fcae2a4e212c7db00058d6f67d2da2215e11.exe windows x86
272852d54bc12d191791a168320dd8a8
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersionExW
HeapFree
InterlockedDecrement
LoadLibraryW
lstrcpyA
GetModuleHandleA
GetSystemInfo
GetTickCount
HeapAlloc
lstrlenA
GetCurrentProcess
SetEndOfFile
CreateSemaphoreW
GetProcessHeap
ResetEvent
IsBadReadPtr
CloseHandle
EnterCriticalSection
GetQueuedCompletionStatus
GlobalUnlock
GlobalHandle
SetEvent
CreateEventW
FreeLibrary
WaitForMultipleObjects
GetThreadPriority
GetCurrentProcessId
SetUnhandledExceptionFilter
ReleaseSemaphore
GetModuleFileNameA
GlobalMemoryStatus
InterlockedExchange
WideCharToMultiByte
CreateFileW
GetEnvironmentStringsW
GetDiskFreeSpaceW
lstrcpyW
GlobalAlloc
GlobalFree
SetThreadPriority
DeleteCriticalSection
QueryPerformanceCounter
VirtualFree
MulDiv
ReadFile
DeleteFileW
lstrlenW
GetFileAttributesW
GetCurrentThread
GetProfileIntA
GetTimeZoneInformation
IsBadCodePtr
SetFilePointer
WaitForSingleObject
CreateThread
LeaveCriticalSection
IsBadWritePtr
GetFileSize
WriteFile
lstrcmpiW
GetSystemTimeAsFileTime
InitializeCriticalSection
GetPrivateProfileStringW
MultiByteToWideChar
lstrcmpW
GetLastError
GetFullPathNameW
InterlockedIncrement
lstrcpynW
GlobalLock
user32
SendMessageW
SetDlgItemInt
TranslateMessage
IsRectEmpty
MoveWindow
GetWindowRect
GetDlgItemInt
GetWindowLongW
ClientToScreen
LoadCursorW
SetCursor
GetDlgItem
IsWindow
GetDesktopWindow
PeekMessageW
DestroyWindow
GetDC
GetAsyncKeyState
SetWindowLongW
LoadStringW
GetClientRect
DispatchMessageW
CreateDialogParamW
IsWindowVisible
CheckRadioButton
InvalidateRect
DefWindowProcW
ShowWindow
EnableWindow
ReleaseDC
CheckDlgButton
SetDlgItemTextW
msnetobj
DllUnregisterServer
DllRegisterServer
DllGetClassObject
DllCanUnloadNow
msls31
LssbGetPlsrunsFromSubline
LssbGetNumberDnodesInSubline
LssbGetVisibleDcpInSubline
LsCompressSubline
LssbGetDurTrailWithPensInSubline
LssbGetObjDimSubline
nddeapi
NDdeIsValidAppTopicListW
NDdeGetTrustedShareA
NDdeGetTrustedShareW
NDdeGetShareSecurityW
NDdeIsValidAppTopicListA
NDdeGetErrorStringA
cewmdm
DllRegisterServer
DllCanUnloadNow
DllGetClassObject
DllUnregisterServer
msltus40
DllRegisterServer
DllUnregisterServer
msoeacct
ValidEmailAddress
HrCreateAccountManager
DllGetClassObject
DllCanUnloadNow
GetDllMajorVersion
oleaut32
VarBstrFromUI8
VarBstrFromUI4
VarBstrFromUI2
VarBstrFromR4
VarBstrFromI1
VarBstrFromR8
VarBstrFromI8
VarBstrFromI4
VarBstrFromDate
VarBstrFromI2
VarBstrFromUI1
VarBstrFromCy
VarBstrFromDec
VarBstrFromDisp
msoert2
AppendTempFileList
Sections
.text Size: 83KB - Virtual size: 82KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 118KB - Virtual size: 117KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 6.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ