Static task
static1
Behavioral task
behavioral1
Sample
9b7357c3c080592c667b847306c39fc8fbf8de7239f616e014ee73eaedda0f45.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9b7357c3c080592c667b847306c39fc8fbf8de7239f616e014ee73eaedda0f45.exe
Resource
win10v2004-20220901-en
General
-
Target
9b7357c3c080592c667b847306c39fc8fbf8de7239f616e014ee73eaedda0f45
-
Size
324KB
-
MD5
471ec490f2ecb3f9be7b9fe3a9484320
-
SHA1
7e69950a685c156d9e95a7f3e458d25b590be66f
-
SHA256
9b7357c3c080592c667b847306c39fc8fbf8de7239f616e014ee73eaedda0f45
-
SHA512
6eb0837df14718601cab5a4613d07187fde1c862181c345ca6bdb458ff078829247f11e388d54a0ff9ac40ab0de677fc3456dfd50e44e9f7ac3e0a7902febd47
-
SSDEEP
6144:osuXYNfamXuRkhNRudBEdyurXsEkbBOVY3m3niP+:osuCIeFSE0Ekbuim
Malware Config
Signatures
Files
-
9b7357c3c080592c667b847306c39fc8fbf8de7239f616e014ee73eaedda0f45.exe windows x86
e91c3e75306b575e5bac818a914cdbf0
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
TerminateProcess
HeapFree
RaiseException
HeapAlloc
HeapSize
GetCPInfo
GetACP
GetOEMCP
HeapReAlloc
UnhandledExceptionFilter
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStdHandle
HeapDestroy
HeapCreate
FreeEnvironmentStringsA
VirtualAlloc
GetStringTypeA
GetStringTypeW
SetUnhandledExceptionFilter
GetModuleHandleA
GetCommandLineA
GetStartupInfoA
GetCurrentProcess
SetStdHandle
GetLocaleInfoA
GetLocaleInfoW
LCMapStringA
LCMapStringW
lstrcmpA
GetVersionExA
lstrcmpiA
lstrcatA
lstrcpyA
_lopen
_llseek
GlobalAlloc
_hread
_lclose
lstrlenA
FreeLibrary
SetLastError
LocalFree
IsDBCSLeadByte
GlobalFlags
GlobalLock
GlobalUnlock
RtlUnwind
SizeofResource
SetErrorMode
FindFirstFileA
GetFullPathNameA
GetVolumeInformationA
FindClose
WriteFile
FlushFileBuffers
SetFilePointer
IsBadReadPtr
LocalAlloc
GlobalFree
GetProcessVersion
GetVersion
WritePrivateProfileStringA
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
LoadLibraryA
TlsAlloc
GlobalHandle
DeleteCriticalSection
MulDiv
InitializeCriticalSection
lstrcpynA
GlobalDeleteAtom
WideCharToMultiByte
GetCurrentThread
GetCurrentThreadId
MultiByteToWideChar
InterlockedDecrement
InterlockedIncrement
LoadResource
ReadFile
FindResourceA
LockResource
GetTickCount
CreateFileA
DeviceIoControl
CreateProcessA
GetUserDefaultLangID
GetModuleFileNameA
CloseHandle
OpenProcess
IsBadWritePtr
GetLastError
IsBadCodePtr
VirtualFree
GetProcAddress
GetProfileStringA
GlobalAddAtomA
user32
GetClientRect
AdjustWindowRectEx
IsWindow
SetActiveWindow
GetSysColor
MapWindowPoints
SystemParametersInfoA
LoadIconA
CreateDialogIndirectParamA
EndDialog
LoadStringA
GetWindowDC
BeginPaint
EndPaint
TabbedTextOutA
DrawTextA
GrayStringA
GetClassNameA
PtInRect
ClientToScreen
GetSysColorBrush
DestroyMenu
InflateRect
GetTopWindow
GetCapture
WinHelpA
GetClassInfoA
RegisterClassA
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetMenu
DefWindowProcA
DestroyWindow
SetPropA
UnhookWindowsHookEx
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
GetPropA
RemovePropA
CallWindowProcA
GetMessageTime
SetFocus
IsWindowEnabled
GetWindowTextLengthA
GetWindowTextA
GetWindowLongA
IsDialogMessageA
SendDlgItemMessageA
GetMenuCheckMarkDimensions
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
GetMessageA
TranslateMessage
DispatchMessageA
GetActiveWindow
GetKeyState
CallNextHookEx
ValidateRect
IsWindowVisible
GetCursorPos
SetWindowsHookExA
SetCursor
PostQuitMessage
CharUpperA
SetWindowLongA
CreateWindowExA
SetWindowWord
IntersectRect
GetSystemMetrics
SetWindowTextA
ShowWindow
LoadBitmapA
ReleaseDC
GetDlgItem
GetWindow
SetWindowPos
GetWindowRect
ScreenToClient
InvalidateRect
PostMessageA
MessageBoxA
GetDC
PeekMessageA
KillTimer
SetTimer
wsprintfA
SendMessageA
GetMessagePos
RegisterWindowMessageA
GetDlgCtrlID
GetParent
EnableWindow
LoadCursorA
UpdateWindow
IsCharAlphaA
IsCharAlphaNumericA
CharNextA
CharPrevA
GetNextDlgTabItem
GetFocus
HideCaret
ShowCaret
ExcludeUpdateRgn
DrawFocusRect
DefDlgProcA
IsIconic
OffsetRect
IsWindowUnicode
UnregisterClassA
WindowFromPoint
gdi32
GetDeviceCaps
CreateDIBitmap
RealizePalette
SelectPalette
GetTextExtentPointA
SelectObject
CreatePalette
CreateCompatibleDC
FillRgn
BitBlt
CreateRectRgn
GetObjectA
CombineRgn
SetTextColor
SetBkColor
CreateBitmap
SaveDC
DeleteDC
GetStockObject
SetBkMode
RestoreDC
SetViewportOrgEx
OffsetViewportOrgEx
SetMapMode
ScaleViewportExtEx
SetViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
GetClipBox
IntersectClipRect
CreateSolidBrush
PtVisible
TextOutA
ExtTextOutA
RectVisible
Escape
PatBlt
DeleteObject
winspool.drv
OpenPrinterA
ClosePrinter
DeletePrinter
AddPrinterA
DeletePrinterConnectionA
GetPrinterDriverA
GetPrinterA
SetPrinterA
GetPrinterDataA
DocumentPropertiesA
EnumPortsA
GetPrinterDriverDirectoryA
EnumPrintersA
advapi32
RegEnumValueA
RegQueryValueExA
RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
RegEnumKeyExA
RegCloseKey
comctl32
ord17
ImageList_Destroy
Sections
.text Size: 123KB - Virtual size: 122KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 21KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 115KB - Virtual size: 114KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.tc Size: 26KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE