Static task
static1
Behavioral task
behavioral1
Sample
9ee17179fc36fbc73d255264aff87becb1b041e1debcd0a8ed584984642dbb67.exe
Resource
win7-20220812-en
General
-
Target
9ee17179fc36fbc73d255264aff87becb1b041e1debcd0a8ed584984642dbb67
-
Size
1.9MB
-
MD5
43ea96e5e940e855f73c5c6b9ffabb2d
-
SHA1
677d621678417dcc4abf832686f0c8f1c5a00fc1
-
SHA256
9ee17179fc36fbc73d255264aff87becb1b041e1debcd0a8ed584984642dbb67
-
SHA512
cc7d3a1a1cd826e2f7459e24dd3bb25794c906527114118fba370a1243eb1527c5b163a04a80645d13844b42d19ffb9a364ffc6a5e8233a1b0efd4e82af79b75
-
SSDEEP
49152:Q5VJWv/QA9dvKpEQ2zJFu+Vp9LLvYcKzdtncU/FILb7:Q5XWvYAmIJFbdQlpu/
Malware Config
Signatures
Files
-
9ee17179fc36fbc73d255264aff87becb1b041e1debcd0a8ed584984642dbb67.exe windows x86
262f3c2f00544276f1579684f75c5bdb
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FoldStringW
SetWaitableTimer
WaitNamedPipeW
CommConfigDialogW
SetSystemTimeAdjustment
SearchPathA
EnumResourceTypesW
GetCPInfoExA
EnumResourceTypesA
GetModuleFileNameA
WriteConsoleOutputCharacterW
GetConsoleAliasesLengthA
DeleteFileA
FillConsoleOutputCharacterW
LocalAlloc
GetProcAddress
GetModuleHandleW
VirtualAlloc
LoadLibraryW
AddRefActCtx
GetConsoleAliasW
WritePrivateProfileStringW
EnumResourceNamesA
LocalFileTimeToFileTime
LocalReAlloc
lstrcpynA
AddAtomA
GetConsoleAliasesLengthW
FreeConsole
VirtualProtect
GetComputerNameExW
FindNextFileW
SetPriorityClass
ScrollConsoleScreenBufferA
OpenJobObjectA
InitializeCriticalSection
FindResourceExW
SetConsoleMode
_lclose
GlobalUnWire
GetComputerNameA
VerifyVersionInfoW
GetLastError
GetSystemDefaultLCID
GetThreadLocale
GetVolumePathNameA
ReadConsoleA
GetModuleHandleA
GetStringTypeA
FindFirstChangeNotificationW
Sleep
ExitProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
MultiByteToWideChar
GetStartupInfoW
RaiseException
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
WriteFile
GetStdHandle
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
TerminateProcess
GetCurrentProcess
IsDebuggerPresent
LoadLibraryA
InitializeCriticalSectionAndSpinCount
HeapSize
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
HeapCreate
VirtualFree
HeapFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
RtlUnwind
GetLocaleInfoA
WideCharToMultiByte
HeapAlloc
HeapReAlloc
LCMapStringA
LCMapStringW
GetStringTypeW
gdi32
GetCharWidth32A
GetFontUnicodeRanges
advapi32
CloseEventLog
GetOldestEventLogRecord
ReportEventW
ole32
CoRegisterMallocSpy
winhttp
WinHttpSetTimeouts
WinHttpReadData
msimg32
TransparentBlt
Sections
.text Size: 63KB - Virtual size: 63KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1.9MB - Virtual size: 41.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ