Static task
static1
Behavioral task
behavioral1
Sample
9bb6444888650ee94fc048c9dc6cd3b3cc01b2a0331407c3cd068a19618acebd.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
9bb6444888650ee94fc048c9dc6cd3b3cc01b2a0331407c3cd068a19618acebd.exe
Resource
win10v2004-20220812-en
General
-
Target
9bb6444888650ee94fc048c9dc6cd3b3cc01b2a0331407c3cd068a19618acebd
-
Size
842KB
-
MD5
7bd0168fe3456a9d72270d1818d26252
-
SHA1
06df0bc1cf3c77dd3736c2d88925e87b016bd80f
-
SHA256
9bb6444888650ee94fc048c9dc6cd3b3cc01b2a0331407c3cd068a19618acebd
-
SHA512
7278a8bc3c39d7eb0a2e4b818967a51e9b5b7761b9520278f1b0ce548bde7f04b13b6904a527cf4dad1ef07fb6f6921088d6a4a3300fbf63418878b230e20970
-
SSDEEP
12288:GsOvjPKfPdNwzzuN3zXJgAtC9ysYHY6dHdQWZBUvK+Sl6TDu/tDI+viMVkDNAcKI:G9vjM3NLJNoWxHd/cK+SgaJNaM05D
Malware Config
Signatures
Files
-
9bb6444888650ee94fc048c9dc6cd3b3cc01b2a0331407c3cd068a19618acebd.exe windows x86
ab8c7d461f3f4fddcf84a37d1c394978
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
QueryPerformanceCounter
SetEnvironmentVariableA
CreateFileA
GetEnvironmentStrings
CompareStringA
FlushFileBuffers
RtlUnwind
GetSystemInfo
VirtualAlloc
GetConsoleMode
InterlockedExchange
HeapAlloc
GlobalFlags
LocalAlloc
FindClose
HeapSize
GetVersionExA
IsDebuggerPresent
LoadResource
GetCurrentThreadId
ReadFile
GlobalAlloc
Sleep
GetModuleFileNameA
lstrlenA
TlsFree
VirtualProtect
GetCommandLineA
GlobalHandle
GetStartupInfoA
GetWindowsDirectoryA
SetStdHandle
TlsSetValue
GetCurrentThread
LockFile
GetFileSize
LocalFree
GetSystemTimeAsFileTime
GetFileTime
GetCommandLineW
VirtualFree
GlobalLock
GetACP
GetThreadLocale
CloseHandle
LockResource
lstrcmpA
SetHandleCount
GetFileType
SizeofResource
DeleteCriticalSection
HeapFree
SetLastError
MulDiv
GetConsoleCP
LocalReAlloc
HeapCreate
GetLastError
TlsAlloc
SetFilePointer
FreeResource
FileTimeToSystemTime
GetStringTypeA
GetProcessHeap
GetLocaleInfoA
LeaveCriticalSection
WriteFile
FileTimeToLocalFileTime
LocalFileTimeToFileTime
SetErrorMode
ExitProcess
RaiseException
FreeEnvironmentStringsA
InterlockedDecrement
HeapReAlloc
EnterCriticalSection
VirtualQuery
GlobalUnlock
InterlockedIncrement
DuplicateHandle
GetStdHandle
GetTimeZoneInformation
TlsGetValue
SetFileTime
GlobalDeleteAtom
UnlockFile
InitializeCriticalSection
UnhandledExceptionFilter
TerminateProcess
FreeLibrary
ConvertDefaultLocale
LCMapStringA
HeapDestroy
GlobalFree
SetEndOfFile
GlobalReAlloc
GetConsoleOutputCP
SetUnhandledExceptionFilter
GetCurrentProcessId
EnumResourceLanguagesW
GetSystemDirectoryA
SystemTimeToFileTime
GetModuleHandleA
GetOEMCP
FindAtomA
AddAtomA
WriteConsoleA
LoadLibraryA
GetProcAddress
FreeConsole
ReadConsoleInputA
GetVersion
GetTickCount
user32
GetLastActivePopup
GetMenu
WindowFromPoint
BeginPaint
SetScrollInfo
LockWindowUpdate
SetScrollRange
SystemParametersInfoA
SetCapture
DeferWindowPos
IsIconic
GetMessageTime
GetWindowPlacement
IsWindowVisible
GetDlgItem
SetActiveWindow
GetDCEx
GetSysColor
AdjustWindowRectEx
PostQuitMessage
ReleaseCapture
InvalidateRect
GetWindowDC
GetKeyState
BringWindowToTop
UnpackDDElParam
UnhookWindowsHookEx
GetMenuItemCount
EndDeferWindowPos
EnableMenuItem
IntersectRect
KillTimer
GetNextDlgTabItem
ShowScrollBar
GetMenuState
GetSystemMetrics
ReleaseDC
ClientToScreen
SetRect
MapWindowPoints
CopyRect
SetFocus
GetCursorPos
ValidateRect
ReuseDDElParam
GetDC
EndPaint
MapDialogRect
DrawIcon
SetMenu
IsWindow
SetWindowContextHelpId
SetTimer
ShowWindow
SetRectEmpty
IsZoomed
PtInRect
GetScrollInfo
GetMessagePos
SetParent
IsWindowEnabled
OffsetRect
GetWindowRect
TrackPopupMenu
InvalidateRgn
SetWindowRgn
SetWindowPos
GetWindowRgn
GetScrollPos
DeleteMenu
GetFocus
UpdateWindow
InflateRect
GetCapture
SetScrollPos
DestroyMenu
IsChild
SetCursor
MessageBeep
GetMenuCheckMarkDimensions
MoveWindow
UnregisterClassA
SetMenuItemBitmaps
GetClientRect
GetSubMenu
GetWindowThreadProcessId
CheckMenuItem
IsRectEmpty
GetParent
BeginDeferWindowPos
GetDlgCtrlID
SetForegroundWindow
ScreenToClient
TranslateMessage
DestroyIcon
EqualRect
GetNextDlgGroupItem
SendDlgItemMessageA
CreatePopupMenu
ScrollWindow
GetScrollRange
GetDesktopWindow
GetTopWindow
DestroyWindow
GetForegroundWindow
FillRect
GetWindow
CallNextHookEx
ShowOwnedPopups
GetMenuItemID
GetSysColorBrush
GetActiveWindow
RedrawWindow
EndDialog
GetSystemMenu
gdi32
GetMapMode
CreateSolidBrush
GetRgnBox
BitBlt
ExcludeClipRect
CreateBitmap
OffsetRgn
IntersectClipRect
GetWindowExtEx
GetDeviceCaps
SetViewportExtEx
CreatePatternBrush
CreateRectRgn
SelectObject
Ellipse
DeleteObject
SetRectRgn
ExtSelectClipRgn
DeleteDC
StretchDIBits
SetTextColor
SaveDC
CreateCompatibleDC
PatBlt
SelectClipRgn
GetPixel
OffsetViewportOrgEx
CombineRgn
CreateEllipticRgn
SetMapMode
CreateCompatibleBitmap
SetBkMode
GetStockObject
GetTextColor
ScaleViewportExtEx
SetWindowExtEx
PtVisible
RestoreDC
GetClipBox
RectVisible
SetViewportOrgEx
CreateRectRgnIndirect
GetBkColor
SetBkColor
DPtoLP
Escape
ScaleWindowExtEx
advapi32
SetFileSecurityW
RegCloseKey
shell32
DragAcceptFiles
DragFinish
ole32
CreateILockBytesOnHGlobal
CoCreateInstance
OleInitialize
CLSIDFromString
StgCreateDocfileOnILockBytes
OleIsCurrentClipboard
CreateStreamOnHGlobal
OleUninitialize
CLSIDFromProgID
StgOpenStorageOnILockBytes
OleFlushClipboard
CoGetClassObject
CoTaskMemAlloc
CoTaskMemFree
CoRevokeClassObject
CoRegisterMessageFilter
CoFreeUnusedLibraries
oleaut32
VariantChangeType
OleCreateFontIndirect
OleLoadPicture
SafeArrayDestroy
SysAllocString
VariantInit
VariantCopy
VariantClear
SystemTimeToVariantTime
VariantTimeToSystemTime
SysAllocStringLen
SysStringLen
SysFreeString
comctl32
ImageList_LoadImageW
shlwapi
PathStripToRootW
PathIsUNCW
PathFindFileNameW
PathRemoveExtensionW
PathFindExtensionW
PathFileExistsW
wldap32
ord201
userenv
UnloadUserProfile
Sections
.text Size: 474KB - Virtual size: 474KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 344KB - Virtual size: 361KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ