Static task
static1
Behavioral task
behavioral1
Sample
9e4e26f3907b0a09bbb7f8b3d9f0c393e5ebb95bf96faa58bf33d5cb3689a6ff.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9e4e26f3907b0a09bbb7f8b3d9f0c393e5ebb95bf96faa58bf33d5cb3689a6ff.exe
Resource
win10v2004-20220812-en
General
-
Target
9e4e26f3907b0a09bbb7f8b3d9f0c393e5ebb95bf96faa58bf33d5cb3689a6ff
-
Size
820KB
-
MD5
6cd199ddd4e9e73451731101f49184e4
-
SHA1
c8cd3201f1583336aa69bdcd2788ac09259e263d
-
SHA256
9e4e26f3907b0a09bbb7f8b3d9f0c393e5ebb95bf96faa58bf33d5cb3689a6ff
-
SHA512
db7f5636d1e36eba415ee4c81d29c85fe38f552ee536d83f36e9720b0ef2b975cfc3c34714057a8d1647c34e0161492be849cfbb901e70eafd02d45c2efe0632
-
SSDEEP
12288:qZxGM3N3JcgW0edVbVOLW9wjwiLI52Ugm+1GxBMyyuTFMP8Pfai4/+SqCc8P9Etw:OwOPidV0VUjTkGwyyi2P8d4WE9EtF14
Malware Config
Signatures
Files
-
9e4e26f3907b0a09bbb7f8b3d9f0c393e5ebb95bf96faa58bf33d5cb3689a6ff.exe windows x86
292028f473b1f896ba807e668223e3b1
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalHandle
FreeEnvironmentStringsA
UnlockFile
SetEndOfFile
MulDiv
GetLastError
lstrcmpA
WriteFile
InterlockedDecrement
GlobalUnlock
SetUnhandledExceptionFilter
GetCommandLineA
FlushFileBuffers
TlsGetValue
ReadFile
GetACP
SetErrorMode
CloseHandle
RtlUnwind
GetLocaleInfoA
GetConsoleOutputCP
GetFileTime
TerminateProcess
VirtualAlloc
LCMapStringA
GetStdHandle
LeaveCriticalSection
GlobalFree
GetOEMCP
GetCommandLineW
GetModuleFileNameA
GetProcessHeap
FreeResource
QueryPerformanceCounter
GetSystemInfo
GetVersionExA
FileTimeToSystemTime
TlsAlloc
CreateFileA
DeleteCriticalSection
SetStdHandle
GetEnvironmentStrings
LocalAlloc
GetThreadLocale
FindClose
ConvertDefaultLocale
Sleep
HeapReAlloc
HeapCreate
HeapSize
HeapFree
InitializeCriticalSection
SetEnvironmentVariableA
LockFile
WriteConsoleA
LocalFree
FileTimeToLocalFileTime
HeapDestroy
DuplicateHandle
GetCurrentProcessId
UnhandledExceptionFilter
InterlockedExchange
TlsSetValue
InterlockedIncrement
SystemTimeToFileTime
IsDebuggerPresent
GlobalLock
SetHandleCount
LoadResource
HeapAlloc
GetSystemTimeAsFileTime
GetTimeZoneInformation
LockResource
GetSystemDirectoryA
VirtualFree
GlobalDeleteAtom
GetConsoleCP
GlobalReAlloc
LocalReAlloc
SetFileTime
FreeLibrary
GetStartupInfoA
GetCurrentThread
TlsFree
LocalFileTimeToFileTime
GetWindowsDirectoryA
GetStringTypeA
GlobalFlags
RaiseException
GlobalAlloc
GetConsoleMode
GetVersion
EnumResourceLanguagesW
SizeofResource
VirtualQuery
SetLastError
GetFileType
EnterCriticalSection
CompareStringA
GetFileSize
SetFilePointer
lstrcpyA
GetCurrentThreadId
LoadLibraryExA
GetModuleHandleA
LoadLibraryA
GetProcAddress
lstrcatA
lstrlenA
ExitProcess
user32
DestroyIcon
GetLastActivePopup
GetWindowRect
GetDC
GetWindow
InflateRect
IsWindow
ValidateRect
BeginDeferWindowPos
AdjustWindowRectEx
GetNextDlgTabItem
GetTopWindow
MessageBeep
SetCursor
SetRectEmpty
EnableMenuItem
GetScrollPos
SetActiveWindow
GetWindowRgn
GetWindowPlacement
EqualRect
LockWindowUpdate
CreatePopupMenu
GetForegroundWindow
WindowFromPoint
IsZoomed
UnpackDDElParam
GetWindowDC
GetScrollRange
SetParent
GetSystemMenu
TrackPopupMenu
ReleaseDC
GetMenuCheckMarkDimensions
GetParent
ScreenToClient
FillRect
GetMenuState
SetCapture
SetScrollInfo
DeferWindowPos
GetMenuItemCount
SendDlgItemMessageA
GetDCEx
InvalidateRect
PtInRect
SetTimer
KillTimer
CheckMenuItem
SetScrollRange
DestroyMenu
GetSysColor
TranslateMessage
GetCursorPos
PostQuitMessage
ShowOwnedPopups
ClientToScreen
UpdateWindow
SetWindowRgn
SetRect
GetMessagePos
CopyRect
GetKeyState
IsWindowVisible
SetWindowContextHelpId
GetNextDlgGroupItem
DestroyWindow
GetClientRect
BeginPaint
ReuseDDElParam
SetWindowPos
DrawIcon
DeleteMenu
IsChild
MapWindowPoints
ScrollWindow
IntersectRect
SetMenuItemBitmaps
GetMenu
GetSysColorBrush
GetWindowThreadProcessId
EndPaint
SetForegroundWindow
MoveWindow
ShowScrollBar
CallNextHookEx
IsIconic
RedrawWindow
OffsetRect
GetActiveWindow
GetDesktopWindow
GetCapture
SetFocus
GetDlgItem
GetScrollInfo
SetMenu
UnregisterClassA
GetSystemMetrics
GetMessageTime
MapDialogRect
EndDeferWindowPos
IsRectEmpty
EndDialog
BringWindowToTop
InvalidateRgn
ReleaseCapture
ShowWindow
GetSubMenu
SetScrollPos
GetFocus
GetDlgCtrlID
UnhookWindowsHookEx
GetMenuItemID
IsWindowEnabled
CharLowerA
SystemParametersInfoA
gdi32
SelectClipRgn
Ellipse
SetViewportOrgEx
PtVisible
CreatePatternBrush
Escape
GetPixel
CreateBitmap
StretchDIBits
PatBlt
DeleteDC
ScaleViewportExtEx
SetViewportExtEx
GetRgnBox
SetRectRgn
GetDeviceCaps
GetMapMode
SetTextColor
ScaleWindowExtEx
CreateRectRgnIndirect
ExcludeClipRect
CombineRgn
IntersectClipRect
CreateEllipticRgn
CreateSolidBrush
GetBkColor
DeleteObject
SetBkMode
CreateCompatibleBitmap
RestoreDC
GetStockObject
SetBkColor
GetTextColor
RectVisible
GetClipBox
SelectObject
SetMapMode
OffsetRgn
CreateCompatibleDC
OffsetViewportOrgEx
DPtoLP
GetWindowExtEx
SetWindowExtEx
SaveDC
BitBlt
CreateRectRgn
ExtSelectClipRgn
advapi32
SetFileSecurityW
RegCloseKey
ole32
CoGetClassObject
CoCreateInstance
OleUninitialize
CLSIDFromProgID
OleIsCurrentClipboard
CLSIDFromString
StgOpenStorageOnILockBytes
CoFreeUnusedLibraries
CreateStreamOnHGlobal
OleInitialize
CoRegisterMessageFilter
StgCreateDocfileOnILockBytes
OleFlushClipboard
CreateILockBytesOnHGlobal
CoRevokeClassObject
oleaut32
SystemTimeToVariantTime
VariantChangeType
SysStringLen
VariantCopy
VariantClear
SysAllocString
SysFreeString
VariantInit
SysAllocStringLen
VariantTimeToSystemTime
OleCreateFontIndirect
OleLoadPicture
SafeArrayDestroy
comctl32
ImageList_LoadImageW
shlwapi
PathRemoveExtensionW
PathFindExtensionW
PathStripToRootW
PathIsUNCW
PathFileExistsW
PathFindFileNameW
snmpapi
SnmpUtilMemAlloc
Sections
.text Size: 555KB - Virtual size: 554KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 85KB - Virtual size: 85KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 153KB - Virtual size: 5.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 101B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ