Static task
static1
Behavioral task
behavioral1
Sample
9ef7b5350f6e9051e690e08b9fc0be4fabae1372fa1b39adaba0b61718347094.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9ef7b5350f6e9051e690e08b9fc0be4fabae1372fa1b39adaba0b61718347094.exe
Resource
win10v2004-20220812-en
General
-
Target
9ef7b5350f6e9051e690e08b9fc0be4fabae1372fa1b39adaba0b61718347094
-
Size
276KB
-
MD5
6315b6181f7f325b33ddc2501eb732b0
-
SHA1
8c594e56ccd9d467753e48c7f0bc90eea8de2f8c
-
SHA256
9ef7b5350f6e9051e690e08b9fc0be4fabae1372fa1b39adaba0b61718347094
-
SHA512
60f928bca7a7eb9422679c5f3403c3ca842f3e4a14fdf07b9be2b07e44a2892e21cd97e5b136765a929f55bfb835b78d6ad9a7456fadb576cdbce984e73f7c85
-
SSDEEP
6144:6C7vrwUoJtX1iS8zYJyngwr4qIQv908urcuR:ZwUAgh0AnuVg5uwuR
Malware Config
Signatures
Files
-
9ef7b5350f6e9051e690e08b9fc0be4fabae1372fa1b39adaba0b61718347094.exe windows x86
91f1becacc65f9e6b5c2b72facab95b6
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetUnhandledExceptionFilter
GetTickCount
MultiByteToWideChar
HeapFree
SystemTimeToFileTime
lstrlenW
SetLastError
QueryPerformanceCounter
GetUserDefaultLCID
GetSystemTimeAsFileTime
GetProcessHeap
HeapAlloc
CloseHandle
GetCurrentProcess
LoadLibraryW
GetLocalTime
WideCharToMultiByte
FindResourceW
CreateFileA
GetCurrentProcessId
GlobalFindAtomA
lstrcmpA
lstrcpyW
olecli32
LeObjectConvert
LeQueryOpen
LeRelease
LeQueryBounds
LeGetUpdateOptions
LeReconnect
LeSetData
LeObjectLong
LeSaveToStream
LeSetBounds
LeQueryOutOfDate
psapi
EnumPageFilesW
EmptyWorkingSet
GetPerformanceInfo
EnumProcessModules
EnumPageFilesA
GetProcessImageFileNameA
Sections
.text Size: 206KB - Virtual size: 205KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 65KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ