Static task
static1
Behavioral task
behavioral1
Sample
9e4af85cff5e97843c19f6778af92542b0525afb5880a4ef914e80097e51d35c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9e4af85cff5e97843c19f6778af92542b0525afb5880a4ef914e80097e51d35c.exe
Resource
win10v2004-20220901-en
General
-
Target
9e4af85cff5e97843c19f6778af92542b0525afb5880a4ef914e80097e51d35c
-
Size
150KB
-
MD5
9222940b8872dd51cc309460dc2b7211
-
SHA1
11a87710cde6e1adaa037b024600816fc1608fb4
-
SHA256
9e4af85cff5e97843c19f6778af92542b0525afb5880a4ef914e80097e51d35c
-
SHA512
8dcd7025342275bc666102fcfc423b24aebb17f9e1d064d73edc517e60049cbfc88be7c409afe9e35f4cbc157d71de62a87f4844d2fd6619ab068f987dc4250a
-
SSDEEP
3072:FDvK6l9QMzqkKA3uJesyhHOwtL+ec8XMZdIR0wA+zxqux+kzD:FDpSA34esyhZtS/88eAmwo
Malware Config
Signatures
Files
-
9e4af85cff5e97843c19f6778af92542b0525afb5880a4ef914e80097e51d35c.exe windows x86
0b11dc08ea1143ab3ecdf571df7ddb1b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WriteConsoleA
FindFirstChangeNotificationW
GetModuleHandleW
TlsGetValue
WriteConsoleW
InterlockedCompareExchange
QueryPerformanceCounter
EnterCriticalSection
WritePrivateProfileStringW
GetFileAttributesExW
GetFileSize
WaitForSingleObject
FreeEnvironmentStringsW
SetConsoleCtrlHandler
DebugBreak
Sleep
WaitForMultipleObjects
GetCurrentThreadId
GetStringTypeA
WinExec
InitializeCriticalSection
VirtualFree
IsDebuggerPresent
FreeLibrary
GetStartupInfoW
GetProcAddress
FormatMessageW
lstrcmpW
WideCharToMultiByte
FlushInstructionCache
FileTimeToSystemTime
HeapReAlloc
lstrcpyW
ResetEvent
InitializeCriticalSectionAndSpinCount
GetDateFormatW
VerLanguageNameW
UnhandledExceptionFilter
HeapFree
LoadLibraryA
TlsAlloc
GetModuleFileNameW
GetTempFileNameW
lstrcpynW
FindNextChangeNotification
InterlockedIncrement
lstrcmpiW
HeapDestroy
IsValidLocale
HeapCreate
GetFileType
CreateFileA
lstrcpynA
GetVersionExW
ExitProcess
GlobalAlloc
GetUserDefaultLCID
SetHandleCount
lstrcatW
GetCurrentThread
LoadResource
RaiseException
IsValidCodePage
LoadLibraryW
EnumSystemLocalesA
TlsSetValue
HeapSize
LocalFree
GetCurrentProcessId
VirtualQuery
GetTimeFormatA
GetCPInfo
GetConsoleCP
GetLastError
GetTickCount
GetModuleHandleA
GlobalLock
GetDateFormatA
ReadFile
GetModuleFileNameA
GetPrivateProfileStringW
DeleteCriticalSection
GetTempPathW
ExpandEnvironmentStringsW
GetConsoleOutputCP
GetStringTypeW
OpenEventW
GetEnvironmentStringsW
GetPrivateProfileIntW
LCMapStringA
CompareStringA
lstrlenA
InterlockedDecrement
ExpandEnvironmentStringsA
CompareStringW
HeapAlloc
GetWindowsDirectoryW
CopyFileW
GetConsoleMode
CreateThread
LocalAlloc
GetCurrentProcess
LoadLibraryExW
InterlockedExchange
GetFileAttributesW
GetSystemDefaultLangID
CreateFileW
GetComputerNameW
GetSystemDirectoryW
CloseHandle
GlobalUnlock
LCMapStringW
GetStdHandle
MulDiv
FindResourceW
GlobalSize
LeaveCriticalSection
lstrlenW
LockResource
SystemTimeToTzSpecificLocalTime
IsProcessorFeaturePresent
OutputDebugStringW
SizeofResource
user32
InflateRect
IsChild
SetTimer
ScrollWindowEx
BeginPaint
GetWindowTextLengthW
LoadStringA
LoadCursorW
GetWindowDC
AppendMenuW
DefWindowProcW
DefMDIChildProcW
OpenClipboard
SetForegroundWindow
EmptyClipboard
IsWindowVisible
SystemParametersInfoW
CopyRect
CreatePopupMenu
MessageBoxW
EndPaint
UnhookWindowsHookEx
TranslateMessage
SetCaretPos
ReleaseCapture
LoadImageW
ScreenToClient
CreateCaret
SetWindowsHookExW
SetDlgItemTextW
GetClassLongW
MessageBeep
DragDetect
RegisterClassExW
MoveWindow
GetWindowTextW
EnableWindow
IsClipboardFormatAvailable
CharLowerW
PeekMessageW
DestroyMenu
ShowScrollBar
GetSysColorBrush
GetScrollInfo
EndDeferWindowPos
SendMessageW
UnregisterClassW
BeginDeferWindowPos
CallNextHookEx
SetCapture
EnableMenuItem
GetKeyState
SetScrollPos
GetDesktopWindow
MonitorFromWindow
wvsprintfW
GetClassInfoW
CreateWindowExW
OffsetRect
CloseClipboard
TranslateAcceleratorW
GetCapture
GetWindowRect
GetMonitorInfoW
CallWindowProcW
ModifyMenuW
RegisterClipboardFormatW
CharNextW
EndDialog
GetDC
LoadAcceleratorsW
DestroyCaret
GetClientRect
GetWindowThreadProcessId
GetActiveWindow
GetCursorPos
DefFrameProcW
GetWindow
ClientToScreen
DestroyWindow
WindowFromPoint
DrawEdge
MapWindowPoints
DeferWindowPos
DrawMenuBar
DrawFocusRect
UnregisterClassA
RegisterWindowMessageW
SetFocus
GetDlgCtrlID
PostQuitMessage
GetClassNameW
UpdateWindow
GetMessageW
GetMenuDefaultItem
BringWindowToTop
InvalidateRect
GetSystemMetrics
GetFocus
SetWindowPos
TrackPopupMenu
GetMessagePos
FrameRect
RemoveMenu
GetWindowLongW
GetSystemMenu
DrawFrameControl
LoadMenuW
RegisterClassW
KillTimer
SetScrollInfo
ReleaseDC
FillRect
GetSubMenu
DispatchMessageW
DialogBoxParamW
SetClipboardData
gdi32
DPtoLP
BitBlt
IntersectClipRect
RealizePalette
Rectangle
GetTextExtentPoint32W
LineTo
SetPolyFillMode
DeleteObject
CreateFontIndirectW
SetTextColor
GetDeviceCaps
CreatePatternBrush
SetViewportOrgEx
SelectPalette
CreatePen
SetBkColor
TextOutW
Polygon
CreateRectRgn
DeleteDC
SetBkMode
CreateCompatibleDC
PatBlt
RestoreDC
SetBrushOrgEx
ExtTextOutW
GetStockObject
Polyline
GetViewportOrgEx
MoveToEx
SelectObject
CreatePalette
SelectClipRgn
CreateDIBSection
GetTextExtentPointW
GetClipRgn
GetTextMetricsW
CreateBitmap
CreateCompatibleBitmap
CreateSolidBrush
GetObjectW
LPtoDP
SetWindowOrgEx
CreateFontW
SaveDC
version
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW
wsock32
shutdown
send
WSAAsyncSelect
accept
gethostbyname
getpeername
listen
ntohs
ioctlsocket
getsockname
connect
inet_addr
WSAGetLastError
closesocket
socket
WSASetLastError
recv
bind
htons
Sections
.text Size: 101KB - Virtual size: 101KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 27KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ