Static task
static1
Behavioral task
behavioral1
Sample
9110e4658119f8c4192396efa7324f61e690034234071490ae71cf39d49e1ccd.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9110e4658119f8c4192396efa7324f61e690034234071490ae71cf39d49e1ccd.exe
Resource
win10v2004-20220812-en
General
-
Target
9110e4658119f8c4192396efa7324f61e690034234071490ae71cf39d49e1ccd
-
Size
173KB
-
MD5
67650ea0c339d3c0953d851d9fdb28d7
-
SHA1
76806042ace21102f5ce80d3432f2c3c53b760c1
-
SHA256
9110e4658119f8c4192396efa7324f61e690034234071490ae71cf39d49e1ccd
-
SHA512
9e336b9490da0986003c91958550d8b7f2e8507073f5e465aa59e027d32205efb41d94918ac905abc455e6adedae86a76b42a261b8d5b13ee669ad03757c6339
-
SSDEEP
3072:DtvRqddn7waAQR57GP70k6BTiokl00z2HFkTFsPF6fczVKCdquJtkq:pvcddnUapc7Z6kokxzWk2WCd56q
Malware Config
Signatures
Files
-
9110e4658119f8c4192396efa7324f61e690034234071490ae71cf39d49e1ccd.exe windows x86
f916e6b1b7975fa69c9fcd4bed9f0a69
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
memset
_wcsnicmp
wcsncmp
wcsncpy
strlen
strcpy
wcscmp
memcpy
wcslen
kernel32
GetModuleHandleW
HeapCreate
GetModuleFileNameW
HeapDestroy
ExitProcess
GetTickCount
Sleep
GetLastError
TerminateProcess
CloseHandle
HeapAlloc
HeapFree
GetCurrentThreadId
GetCurrentProcessId
FreeLibrary
LoadLibraryW
WideCharToMultiByte
GetProcAddress
HeapReAlloc
user32
MessageBoxW
GetWindowThreadProcessId
IsWindowVisible
GetWindowLongA
GetForegroundWindow
IsWindowEnabled
EnableWindow
EnumWindows
SetWindowPos
EnumDisplaySettingsW
GetSystemMetrics
gdi32
CreateDCW
GetDeviceCaps
DeleteDC
comctl32
InitCommonControlsEx
ole32
CoInitialize
Sections
.code Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 118B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.uqow Size: 157KB - Virtual size: 160KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ