Static task
static1
Behavioral task
behavioral1
Sample
9b971c196c45d2dfac44172d584484c658e35a3f383ec0d456c853d8d175e0b1.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9b971c196c45d2dfac44172d584484c658e35a3f383ec0d456c853d8d175e0b1.exe
Resource
win10v2004-20220812-en
General
-
Target
9b971c196c45d2dfac44172d584484c658e35a3f383ec0d456c853d8d175e0b1
-
Size
422KB
-
MD5
635801c796c72806d9c3790d8ebb7b6f
-
SHA1
a9d6bdabb8e87655278f57598124d193d04546d8
-
SHA256
9b971c196c45d2dfac44172d584484c658e35a3f383ec0d456c853d8d175e0b1
-
SHA512
0ed63d1fa7e4e07da4bbf31c096dfe882db46b07b8337c024578b436741c09169b721fc06fabbb64b60ce9a7b1e3564fb4d92c6598b2ad3086cdf35d4a622289
-
SSDEEP
6144:9Thnqn2iFmK+ySdzV8/geKLkZK6GtMWtd:9ThnxbTZGjZlG+ud
Malware Config
Signatures
Files
-
9b971c196c45d2dfac44172d584484c658e35a3f383ec0d456c853d8d175e0b1.exe windows x86
a6ff04e5c9d4fc3dd47e894533483b29
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
_onexit
__dllonexit
iswspace
iswdigit
vswprintf
wcsstr
_wcslwr
wcschr
memcpy
memmove
_wcsdup
calloc
_wcsicmp
wcsncmp
_except_handler3
wcstok
wcsrchr
malloc
swprintf
_wtoi
memcmp
free
wcscpy
wcsncpy
swscanf
strlen
_waccess
wcscmp
wcslen
strcmp
_EH_prolog
__CxxFrameHandler
_vsnwprintf
memset
??3@YAXPAX@Z
??2@YAPAXI@Z
_controlfp
kernel32
GetModuleHandleA
IsBadReadPtr
IsBadWritePtr
IsBadStringPtrW
GetModuleHandleW
lstrlenA
DeleteCriticalSection
InitializeCriticalSection
GetProcAddress
GetFileInformationByHandle
SetLastError
GetVersionExW
GlobalAlloc
GlobalLock
GetModuleFileNameW
GetPrivateProfileIntW
WritePrivateProfileStringW
GlobalDeleteAtom
FreeLibrary
LoadLibraryW
GlobalAddAtomW
GlobalFindAtomW
WideCharToMultiByte
lstrlenW
GetTempPathW
Sleep
DeleteFileW
GetUserDefaultLangID
SetPriorityClass
GetCurrentProcess
lstrcpyW
CompareStringW
CloseHandle
CreateFileW
MultiByteToWideChar
InterlockedIncrement
InterlockedDecrement
ReadFile
GetFileSize
GetFileAttributesW
GlobalFree
CreateDirectoryW
FindClose
FindNextFileW
FindFirstFileW
GetPrivateProfileStringW
GetPrivateProfileStringA
GetStartupInfoA
user32
ReleaseDC
SetWindowTextW
GetDC
DrawTextW
GetSysColor
EndPaint
BeginPaint
GetSystemMetrics
PeekMessageW
DispatchMessageW
MoveWindow
GetClientRect
SetPropW
GetWindowLongW
InvalidateRect
ClientToScreen
GetPropW
CreateWindowExW
EndDialog
SetDlgItemTextW
PtInRect
CallWindowProcW
ScreenToClient
EnableWindow
GetDlgItem
SendMessageW
SetWindowLongW
GetParent
PostMessageW
KillTimer
GetWindowRect
SystemParametersInfoW
SetWindowPos
SendDlgItemMessageW
ShowWindow
SetTimer
FindWindowW
SetFocus
LoadIconW
DialogBoxIndirectParamW
RemovePropW
LoadStringW
RegisterWindowMessageW
IsWindow
OffsetRect
wsprintfW
CopyRect
gdi32
DeleteDC
GetStockObject
CreateCompatibleBitmap
CreateCompatibleDC
SetBkMode
SetBkColor
ExtTextOutW
GetTextMetricsW
GetTextExtentPoint32W
SelectObject
SetTextColor
CreateFontW
CreateSolidBrush
BitBlt
DeleteObject
advapi32
RegDeleteValueW
RegCloseKey
RegCreateKeyW
RegSetValueExA
RegSetValueExW
RegQueryValueExW
RegOpenKeyExW
RegQueryInfoKeyW
RegEnumKeyExW
shell32
SHChangeNotify
ShellExecuteW
ole32
CoGetObject
StringFromGUID2
CoUninitialize
CoInitialize
CoCreateInstance
CLSIDFromString
OleSetContainedObject
OleCreate
oleaut32
SysAllocStringLen
SysFreeString
SysStringLen
VariantClear
SysAllocString
comctl32
PropertySheetW
Sections
.text Size: 113KB - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 35KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 17KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 149KB - Virtual size: 149KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 106KB - Virtual size: 108KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE