Static task
static1
Behavioral task
behavioral1
Sample
9a9a50c834440a5442873de322a8e8147360f7c9145183f5a6e21ea8c39b3b2e.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
9a9a50c834440a5442873de322a8e8147360f7c9145183f5a6e21ea8c39b3b2e.exe
Resource
win10v2004-20220901-en
General
-
Target
9a9a50c834440a5442873de322a8e8147360f7c9145183f5a6e21ea8c39b3b2e
-
Size
160KB
-
MD5
65a7d9254f66da6fc4f54f48b0ddb640
-
SHA1
2fd221f73cc3569684c57acfb6d4eb72b166bc2a
-
SHA256
9a9a50c834440a5442873de322a8e8147360f7c9145183f5a6e21ea8c39b3b2e
-
SHA512
c508d2d5e8da73d36f694c438c2be13b03f6921eeef7e8b2ac5b6a60de1118d9f0b177d396e119bd39b5af9b413c078e00d735a75aed02312d7e7f082182e492
-
SSDEEP
3072:1NyHdA1upJCR+wxzzAtc8VmE0WZ/jFVggIoGuG:1s9aupoMuEtc8VN0WtjTgj
Malware Config
Signatures
Files
-
9a9a50c834440a5442873de322a8e8147360f7c9145183f5a6e21ea8c39b3b2e.exe windows x86
7bc2b2c9b0197393eb2d24a6473d8d7f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ws2_32
WSACancelAsyncRequest
sendto
oleaut32
SafeArrayGetElemsize
VarUI4FromI4
VarDateFromUI1
CreateTypeLi
VarI4FromUI2
SafeArrayPtrOfIndex
VarIdiv
RegisterTypeLi
SafeArrayLock
SafeArrayCreateEx
VarBstrFromI2
VarDecCmpR8
VarUI1FromDate
VarR4FromStr
OleCreatePropertyFrameIndirect
VarI2FromCy
kernel32
GetStartupInfoA
GetModuleHandleA
Heap32Next
comctl32
ord8
ImageList_DragEnter
ImageList_Write
gdi32
DeleteMetaFile
CreateICW
PolyPolygon
GdiSetBatchLimit
CreatePatternBrush
CopyEnhMetaFileA
GetCurrentPositionEx
FloodFill
PolyBezierTo
GetMetaFileA
PolyPolyline
CreateBitmap
SetBkMode
UpdateICMRegKeyW
GetCharABCWidthsFloatW
OffsetClipRgn
ole32
StgCreateDocfileOnILockBytes
OleSetClipboard
OleSetMenuDescriptor
OleCreateLinkFromDataEx
GetHGlobalFromStream
CoFileTimeNow
CoFreeUnusedLibraries
HMENU_UserFree
setupapi
SetupDiRegisterDeviceInfo
SetupDiCallClassInstaller
user32
ShowWindowAsync
RemovePropW
AnyPopup
SetClipboardViewer
SetMessageExtraInfo
RegisterClassExA
OemKeyScan
GetDoubleClickTime
RegisterClipboardFormatW
ValidateRgn
DdeAccessData
DdeImpersonateClient
GetWindowWord
DdeGetData
GetKeyboardLayoutNameW
shell32
SHGetDataFromIDListW
SHGetSettings
ShellAboutA
SHGetSpecialFolderPathW
msvcrt
_adjust_fdiv
_exit
_XcptFilter
exit
_acmdln
__p__commode
__p__fmode
__set_app_type
__getmainargs
_controlfp
_initterm
__setusermatherr
_except_handler3
Sections
.text Size: 100KB - Virtual size: 98KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 40KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ