Static task
static1
Behavioral task
behavioral1
Sample
9d4775e3737c7d4d7988f55dfa2f53ed8635ba441a19c205bfa90b2a0f3c2da6.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
9d4775e3737c7d4d7988f55dfa2f53ed8635ba441a19c205bfa90b2a0f3c2da6.exe
Resource
win10v2004-20220812-en
General
-
Target
9d4775e3737c7d4d7988f55dfa2f53ed8635ba441a19c205bfa90b2a0f3c2da6
-
Size
275KB
-
MD5
77abf9da5a9c5d1a949db998327e4cf0
-
SHA1
a62699009fa009862063d34c240a98418c2e47d0
-
SHA256
9d4775e3737c7d4d7988f55dfa2f53ed8635ba441a19c205bfa90b2a0f3c2da6
-
SHA512
380b8ffe871561af5458aef31bae518d1d203d6a7ea97da8d3d399d326e7ae4311289e1e06b5f9f42b883004c9566fc06205a8ccb8ee65463b7fedcb3ff1e0da
-
SSDEEP
6144:U5JofY3qRSoKM8VXfuo3WbXEjjm8/yFVZzuv:Au4ToKMMfuo3W7E6VZzuv
Malware Config
Signatures
Files
-
9d4775e3737c7d4d7988f55dfa2f53ed8635ba441a19c205bfa90b2a0f3c2da6.exe windows x86
2e3a2dff27132dd5f53739f6879e3ae4
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
DefWindowProcW
GetWindowTextW
IsWindow
UnregisterClassW
ScreenToClient
IsZoomed
IsIconic
SetWindowLongW
InSendMessage
GetWindowLongW
BeginPaint
CreateWindowExW
GetWindowRect
GetClientRect
ShowWindow
TranslateMessage
RegisterClassW
DestroyWindow
PostQuitMessage
LoadCursorW
SendMessageW
PostMessageW
EndPaint
LoadStringW
SetRectEmpty
SetWindowTextW
DispatchMessageW
WindowFromDC
IsWindowVisible
GetSystemMetrics
GetMessageW
SetWindowPos
SetForegroundWindow
kernel32
lstrlenA
LocalAlloc
LoadLibraryW
lstrcpynW
QueryPerformanceCounter
MultiByteToWideChar
ResetEvent
GetACP
SetUnhandledExceptionFilter
GetTickCount
MulDiv
LocalFree
GetSystemTimeAsFileTime
lstrlenW
WaitForSingleObject
GetCurrentProcessId
CloseHandle
GetCurrentProcess
SetEvent
CreateEventW
CreateThread
lstrcpyW
ole32
CoTaskMemFree
CoCreateInstance
CoUninitialize
CoInitialize
gdi32
CreatePalette
GetStockObject
StretchDIBits
GetObjectType
SelectPalette
DeleteObject
RealizePalette
SetStretchBltMode
winmm
mciSetDriverData
mciLoadCommandResource
GetDriverModuleHandle
mciGetDriverData
mciFreeCommandResource
mciDriverYield
DefDriverProc
quartz
DBToAmpFactor
AmpFactorToDB
Sections
.text Size: 162KB - Virtual size: 162KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 103KB - Virtual size: 102KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 196B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ