Static task
static1
Behavioral task
behavioral1
Sample
9d944de2f01ef15d8e3360e6e0cb805b16af9260c06b12bdf4d644ae3a1c83f8.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
9d944de2f01ef15d8e3360e6e0cb805b16af9260c06b12bdf4d644ae3a1c83f8.exe
Resource
win10v2004-20220812-en
General
-
Target
9d944de2f01ef15d8e3360e6e0cb805b16af9260c06b12bdf4d644ae3a1c83f8
-
Size
552KB
-
MD5
1ef5023f5323758050c2a4c862d7c150
-
SHA1
6952718e2725556d808e24c70ab777b2ad225290
-
SHA256
9d944de2f01ef15d8e3360e6e0cb805b16af9260c06b12bdf4d644ae3a1c83f8
-
SHA512
dcc5956fbf5cfd3cdbe6c3c1e002c5c31801ca2212a1557401f908041c59ba26d538ec5d3607bc01dac6357758056cdcdaf1cd07ccd48528a337f99639335d91
-
SSDEEP
12288:dndk0mjOYklHhn8jZvGwFTjcyuQJ6XEUCNII5Oc2CnSsPF:myYo8jFGwFTjcPQJ6XEVNIIgcNnSoF
Malware Config
Signatures
Files
-
9d944de2f01ef15d8e3360e6e0cb805b16af9260c06b12bdf4d644ae3a1c83f8.exe windows x86
6075f86a8901ee6b2db003d09980a869
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
timeGetTime
kernel32
Sleep
GetExitCodeProcess
InterlockedIncrement
InterlockedDecrement
SetFileAttributesA
QueryPerformanceCounter
QueryPerformanceFrequency
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
PulseEvent
SetEvent
CreateEventA
CreateSemaphoreA
TerminateProcess
ExitThread
SetThreadPriority
ReleaseSemaphore
ResetEvent
GetExitCodeThread
WaitForMultipleObjects
CreateMutexA
GetCurrentThreadId
ReleaseMutex
GetCurrentProcessId
ResumeThread
CreateThread
VirtualAlloc
VirtualFree
LoadLibraryExA
FreeLibrary
GetProcAddress
SetLastError
GetLastError
OutputDebugStringA
VirtualQuery
FileTimeToDosDateTime
CreateFileA
GetFileSize
GlobalMemoryStatus
SetFilePointer
lstrlenA
GetCurrentProcess
CreateProcessA
WriteFile
lstrcatA
RaiseException
GetSystemInfo
IsDebuggerPresent
GetFileTime
FileTimeToLocalFileTime
GetTempPathA
lstrcpyA
lstrcpynA
GetVersionExA
LoadLibraryA
GetStringTypeW
GetStringTypeA
IsValidCodePage
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetOEMCP
GetACP
GetTickCount
HeapCreate
HeapDestroy
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
SetStdHandle
HeapSize
ExitProcess
GetStartupInfoA
GetStdHandle
SetHandleCount
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
LCMapStringW
LCMapStringA
GetCPInfo
GetConsoleMode
GetConsoleCP
DeleteFileA
WaitForSingleObject
CloseHandle
GetModuleHandleA
GetLocaleInfoW
GetModuleFileNameA
GetSystemTimeAsFileTime
WriteConsoleA
CompareStringW
CompareStringA
SetEndOfFile
GetTimeZoneInformation
HeapReAlloc
WriteConsoleW
GetConsoleOutputCP
WideCharToMultiByte
MultiByteToWideChar
InterlockedExchange
RtlUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCommandLineA
HeapFree
HeapAlloc
GetProcessHeap
GetDriveTypeA
GetFullPathNameA
MoveFileA
FileTimeToSystemTime
GetFileType
GetFileAttributesA
FindFirstFileA
FindNextFileA
FindClose
ReadFile
CreateDirectoryA
RemoveDirectoryA
SetEnvironmentVariableA
GetCurrentDirectoryA
SetCurrentDirectoryA
FlushFileBuffers
user32
wvsprintfA
PostThreadMessageA
wsprintfA
MessageBoxA
advapi32
GetUserNameA
dbghelp
MiniDumpWriteDump
version
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA
Sections
.text Size: 416KB - Virtual size: 414KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 60KB - Virtual size: 58KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 194KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.jet Size: 4KB - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.jet Size: 4KB - Virtual size: 88B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 44KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ