Static task
static1
Behavioral task
behavioral1
Sample
9dcca21b551addea05070b404b8ec7c543c51b505da7142f1de20c7973789f3c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9dcca21b551addea05070b404b8ec7c543c51b505da7142f1de20c7973789f3c.exe
Resource
win10v2004-20220901-en
General
-
Target
9dcca21b551addea05070b404b8ec7c543c51b505da7142f1de20c7973789f3c
-
Size
64KB
-
MD5
ddd0747055514229f4babce1d2deb654
-
SHA1
1f3460d0275708bda30891b061c1c02644a8770a
-
SHA256
9dcca21b551addea05070b404b8ec7c543c51b505da7142f1de20c7973789f3c
-
SHA512
025bf6fad3c06285d0de6abec07d7a41024db7a9c5da4035d179e3edecc0a28ddef00e8c119f8e890b0f4377b2852b53098c832a9f56c5df9689749f3ae5e2dd
-
SSDEEP
1536:vBlpCBSCIviTiFWj8U3vesIoeSs06BWEhC:vB6BQbkesIKsFzC
Malware Config
Signatures
Files
-
9dcca21b551addea05070b404b8ec7c543c51b505da7142f1de20c7973789f3c.exe windows x86
1f57911a421565c7b26c1d6cefe7fb4c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CopyFileA
CloseHandle
WriteFile
CreateFileA
InterlockedIncrement
lstrcatA
LCMapStringW
LCMapStringA
SetEndOfFile
SetFilePointer
LoadLibraryA
GetProcAddress
GetOEMCP
GetACP
GetCPInfo
ReadFile
FlushFileBuffers
SetStdHandle
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
GetModuleHandleA
lstrcpyA
Sleep
InterlockedDecrement
GlobalAddAtomA
HeapReAlloc
GetLastError
ResumeThread
CreateThread
TlsSetValue
TlsGetValue
ExitThread
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapFree
GetCurrentThreadId
TlsAlloc
SetLastError
HeapAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
RtlUnwind
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
DeleteCriticalSection
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
user32
SendDlgItemMessageA
DialogBoxParamA
mouse_event
IsDlgButtonChecked
SetCursorPos
VkKeyScanA
keybd_event
RegisterHotKey
MessageBoxA
GetWindowLongA
EndDialog
SendMessageA
LoadIconA
GetDlgItem
SetDlgItemTextA
SetTimer
GetCursorPos
ShowWindow
GetDlgItemTextA
wsprintfA
SetForegroundWindow
UnregisterHotKey
comdlg32
GetOpenFileNameA
GetSaveFileNameA
advapi32
RegCreateKeyExA
RegQueryValueExA
RegCloseKey
RegSetValueExA
shell32
ShellExecuteA
Shell_NotifyIconA
Sections
.text Size: 32KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 16KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ