Static task
static1
Behavioral task
behavioral1
Sample
09b9c3a603c7ce9a886de6bd4c731f4838f6827f7380666b2be3ed7ec705dd0a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
09b9c3a603c7ce9a886de6bd4c731f4838f6827f7380666b2be3ed7ec705dd0a.exe
Resource
win10v2004-20220812-en
General
-
Target
09b9c3a603c7ce9a886de6bd4c731f4838f6827f7380666b2be3ed7ec705dd0a
-
Size
252KB
-
MD5
32c71fc101ed0556ece2492f65e9ba49
-
SHA1
2df3d1586b97f9c437dc3b398ac3e2e110929b8b
-
SHA256
09b9c3a603c7ce9a886de6bd4c731f4838f6827f7380666b2be3ed7ec705dd0a
-
SHA512
2987f06c9e3f2b4cd98a1e8cd8810a21dbc9973937b2939324500cf56dbf7804869fefe08259aac881f9f82cec5c589cf0a6ba9fd9e7eb7a4d96aa75eebd6b67
-
SSDEEP
3072:uE7lhXr0F5j2PU/jviQUFyhcYMJht850QvXkCIGbzxZ7bT1Jl4qFm8K5hEufMjWq:u0lhiZ2P0LWyhd500Icbnx8qEh1vM
Malware Config
Signatures
Files
-
09b9c3a603c7ce9a886de6bd4c731f4838f6827f7380666b2be3ed7ec705dd0a.exe windows x86
29e35a3232160389d09c3e1126ef1bea
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
timeGetTime
timeBeginPeriod
timeGetDevCaps
timeEndPeriod
kernel32
EnterCriticalSection
LeaveCriticalSection
GetCurrentThreadId
InterlockedIncrement
InterlockedDecrement
GetProcAddress
FreeLibrary
DisableThreadLibraryCalls
LoadLibraryA
HeapCreate
HeapDestroy
HeapAlloc
HeapFree
GetSystemInfo
GlobalMemoryStatus
HeapCompact
DeleteFileA
MultiByteToWideChar
GetLocaleInfoA
DeleteCriticalSection
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
GetStringTypeW
GetStringTypeA
IsBadWritePtr
SetEndOfFile
SetStdHandle
VirtualQuery
VirtualAlloc
VirtualProtect
HeapSize
HeapReAlloc
LCMapStringW
LCMapStringA
VirtualFree
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetModuleFileNameA
GetStdHandle
GetCurrentProcess
TerminateProcess
InitializeCriticalSection
GetSystemDirectoryA
WideCharToMultiByte
Sleep
FlushFileBuffers
CompareStringA
InterlockedExchange
CompareStringW
GetTimeZoneInformation
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
ExitProcess
GetCPInfo
GetOEMCP
GetACP
TlsGetValue
TlsSetValue
TlsFree
RtlUnwind
GetSystemTimeAsFileTime
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersionExA
GetLastError
SetEnvironmentVariableA
GetCurrentDirectoryA
SetCurrentDirectoryA
CloseHandle
WriteFile
GetFileType
CreateFileA
ReadFile
SetFilePointer
FileTimeToSystemTime
FileTimeToLocalFileTime
GetFileInformationByHandle
PeekNamedPipe
GetDriveTypeA
GetFullPathNameA
CreateDirectoryA
FindClose
FindFirstFileA
FindNextFileA
TlsAlloc
SetLastError
user32
DestroyWindow
PostQuitMessage
MessageBoxA
TranslateMessage
RegisterClassA
SetCursor
ShowCursor
GetWindowRect
SetWindowPos
GetForegroundWindow
GetWindowThreadProcessId
AttachThreadInput
PeekMessageA
DispatchMessageA
GetCursor
EnumDisplayMonitors
GetFocus
GetDC
GetClientRect
ReleaseDC
GetSystemMetrics
MonitorFromRect
GetMonitorInfoA
CreateWindowExA
AdjustWindowRect
SetFocus
ShowWindow
SetForegroundWindow
UpdateWindow
LoadIconA
RegisterClassExA
DefWindowProcA
gdi32
Rectangle
SetTextColor
SetBkColor
SetTextAlign
TextOutA
DeleteObject
CreateFontA
GetStockObject
SelectObject
ole32
CoCreateInstance
CoInitialize
CoInitializeEx
CoUninitialize
oleaut32
VariantClear
VariantInit
SysStringLen
version
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA
Sections
.text Size: 107KB - Virtual size: 107KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 21KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 103KB - Virtual size: 102KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ