Static task
static1
Behavioral task
behavioral1
Sample
9ef37b09f6a7ffc7f0bab6d266a35903dab1527aecaa2ecde25f03cba0f6af02.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9ef37b09f6a7ffc7f0bab6d266a35903dab1527aecaa2ecde25f03cba0f6af02.exe
Resource
win10v2004-20220812-en
General
-
Target
9ef37b09f6a7ffc7f0bab6d266a35903dab1527aecaa2ecde25f03cba0f6af02
-
Size
279KB
-
MD5
44a4e6b5a8310a2ff5ed62f4729bc4fd
-
SHA1
aa4232975f00b7f76e33c3515b6016239c3a2d85
-
SHA256
9ef37b09f6a7ffc7f0bab6d266a35903dab1527aecaa2ecde25f03cba0f6af02
-
SHA512
89760b07fec13b01d8149dc5928c4b9de0573133845d39bfee15f1a5ad72bf10262e32daef7e84831697aa5c2a8fe3d455f8060b98a7299237a110a16d525ce6
-
SSDEEP
6144:qlzSkbIeugVlRXLtGb+IbR3BOn6HcJb6+/tA:qd6SVlpYXjHcJG
Malware Config
Signatures
Files
-
9ef37b09f6a7ffc7f0bab6d266a35903dab1527aecaa2ecde25f03cba0f6af02.exe windows x86
64ced3359209e829147174e4de6ec1ef
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetWindowThreadProcessId
DialogBoxParamA
GetActiveWindow
GetThreadDesktop
GetScrollInfo
SetDlgItemTextA
MessageBoxA
SetWindowTextA
IsCharAlphaA
EnumWindows
EnumDisplaySettingsA
ole32
CoGetCallerTID
comctl32
ord17
advapi32
RegQueryValueExA
RegCloseKey
RegOpenKeyExA
kernel32
GetTickCount
LocalAlloc
GetLocalTime
GetSystemDefaultLangID
IsBadWritePtr
GetStartupInfoA
LocalFree
InitializeCriticalSection
GetUserDefaultLangID
IsBadReadPtr
HeapFree
HeapDestroy
GetTimeFormatA
LoadLibraryA
FreeLibrary
GetProcAddress
HeapAlloc
ExitProcess
HeapCreate
GetDateFormatA
DeleteCriticalSection
Sections
.text Size: 266KB - Virtual size: 265KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ