Static task
static1
Behavioral task
behavioral1
Sample
9d808ca6b578487a296ddce40a6d2977bab80b851126e02edc44d49c9903db0c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9d808ca6b578487a296ddce40a6d2977bab80b851126e02edc44d49c9903db0c.exe
Resource
win10v2004-20220812-en
General
-
Target
9d808ca6b578487a296ddce40a6d2977bab80b851126e02edc44d49c9903db0c
-
Size
176KB
-
MD5
89cf79165dad2f56c067fe96354829ad
-
SHA1
df5c5bce1649bc9e591dbfc81730639220f0a075
-
SHA256
9d808ca6b578487a296ddce40a6d2977bab80b851126e02edc44d49c9903db0c
-
SHA512
b66564cdb4319156d75114c422cecad3dc4f8835a9b6c9044c6f675826425b67182dfb9faa1b2d502392efaf295f42ed6c82e6f26b29c1d2e270441bcdd77cda
-
SSDEEP
1536:QNLSvyrfbSwWEP115RUIV6ffI8xotrah13/8HJNOyTiH4wkfdd4N28KD+YzGJQ:QAvyrfbfWEPzU7fNSa2i2iH43fQZKfV
Malware Config
Signatures
Files
-
9d808ca6b578487a296ddce40a6d2977bab80b851126e02edc44d49c9903db0c.exe windows x86
91c4f806e22e1c9f34e021ab5b87c4df
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WaitForSingleObject
WideCharToMultiByte
_lclose
lstrcatW
lstrcmpW
UnhandledExceptionFilter
lstrcpyW
lstrcpynW
lstrlenW
VirtualAlloc
TerminateProcess
Sleep
SetUnhandledExceptionFilter
SetEvent
SetErrorMode
SearchPathW
ReadFile
QueryPerformanceCounter
MultiByteToWideChar
MulDiv
LocalReAlloc
LocalFree
LocalAlloc
LoadLibraryW
LoadLibraryA
IsBadCodePtr
GlobalUnlock
GlobalSize
GlobalLock
GlobalGetAtomNameW
GlobalFree
GlobalDeleteAtom
GlobalAlloc
GlobalAddAtomW
GetVersionExW
GetTickCount
GetSystemTimeAsFileTime
GetStartupInfoA
GetProfileStringW
GetProfileIntW
GetProcAddress
GetPrivateProfileStringW
GetModuleHandleA
GetLocaleInfoW
GetLastError
GetFileAttributesW
GetDriveTypeW
GetCurrentThreadId
GetCurrentProcessId
GetCurrentProcess
GetACP
FreeLibrary
FormatMessageW
ExitThread
ExitProcess
CreateThread
CreateProcessW
CreateFileW
CreateEventW
lstrcmpiW
CloseHandle
user32
SystemParametersInfoW
TranslateAcceleratorW
TranslateMessage
UnhookWindowsHook
UnregisterDeviceNotification
UpdateWindow
wsprintfA
GetSysColor
OpenIcon
CharNextW
CharUpperW
IsWindow
GetWindowContextHelpId
SendMessageA
LoadBitmapA
ShowWindow
SetWindowPos
SetRectEmpty
SetRect
SetParent
SetMenu
SetForegroundWindow
SetCursor
SetActiveWindow
RemoveMenu
RegisterDeviceNotificationW
RegisterClipboardFormatW
PeekMessageW
MsgWaitForMultipleObjects
MoveWindow
ModifyMenuW
MessageBoxW
LoadMenuW
LoadImageW
LoadIconW
LoadAcceleratorsW
IsZoomed
IsWindowEnabled
IsRectEmpty
IsIconic
IsCharAlphaW
IsCharAlphaNumericW
InvalidateRect
InsertMenuW
InflateRect
GetWindowPlacement
GetSystemMetrics
GetSubMenu
GetMenuItemCount
GetMenu
GetDialogBaseUnits
GetDesktopWindow
GetAsyncKeyState
GetActiveWindow
FrameRect
FindWindowW
EqualRect
EnableMenuItem
DrawTextW
DrawMenuBar
DrawIcon
DispatchMessageW
DestroyWindow
DestroyMenu
DeleteMenu
CreateWindowExW
CreateMenu
CopyAcceleratorTableW
CheckMenuItem
CharLowerBuffW
BringWindowToTop
AdjustWindowRect
IsWindowVisible
gdi32
ExcludeClipRect
GetBkMode
GetDIBits
GetDeviceCaps
GetObjectW
GetPaletteEntries
GetROP2
GetStockObject
GetSystemPaletteEntries
GetSystemPaletteUse
GetTextExtentPoint32W
CreateSolidBrush
LineTo
MoveToEx
PatBlt
Polygon
RealizePalette
Rectangle
DeleteObject
SaveDC
SelectObject
SelectPalette
SetBkColor
SetBkMode
SetMapMode
SetROP2
SetTextColor
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
StretchBlt
TextOutW
GetFontLanguageInfo
UnrealizeObject
StrokePath
AbortPath
DeleteMetaFile
RestoreDC
CreateBitmap
CreatePen
CreatePatternBrush
CreateMetaFileW
CreateFontIndirectW
CreateCompatibleDC
CreateCompatibleBitmap
DeleteDC
advapi32
RegOpenKeyExA
RegQueryValueExW
shell32
SHGetFileInfoW
ExtractIconW
DragQueryFileW
DragFinish
DragAcceptFiles
ShellAboutW
msvcrt
memcpy
memset
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 132KB - Virtual size: 131KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 988B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 39KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ