Static task
static1
Behavioral task
behavioral1
Sample
9dc9cabb25a63070bbb3914404b4eadfcf52083abe88c4e8f70416ac0f9b7add.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9dc9cabb25a63070bbb3914404b4eadfcf52083abe88c4e8f70416ac0f9b7add.exe
Resource
win10v2004-20220812-en
General
-
Target
9dc9cabb25a63070bbb3914404b4eadfcf52083abe88c4e8f70416ac0f9b7add
-
Size
426KB
-
MD5
0ddd5aa4720c1235c3d89a11cd134e50
-
SHA1
45369236f1d545cc4538a05873ec8317080a2caf
-
SHA256
9dc9cabb25a63070bbb3914404b4eadfcf52083abe88c4e8f70416ac0f9b7add
-
SHA512
f522496b5230fffa0bb36a6be58924dae64ac90a7e1ce57653b44b7a48808e8f58f6f9d6bea6f59272898b2879778518e4e82b9958b39b3d8bd92ae99fbdea0f
-
SSDEEP
6144:qckEBcvUSL88G+mniAxOVucZ3XDo0Wi6eWkfQPgHiYYF26/wCrN9b7RSJ5Ap/XJ:fCvO8Rmnn/cpo0Wi68CY4ok9b7kJ5AJ
Malware Config
Signatures
Files
-
9dc9cabb25a63070bbb3914404b4eadfcf52083abe88c4e8f70416ac0f9b7add.exe windows x86
5e1001e65a46fb3f0f995da876d3c2a3
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeviceIoControl
GetProcessWorkingSetSize
EnumResourceNamesA
DebugSetProcessKillOnExit
SizeofResource
TlsSetValue
ReleaseActCtx
UnlockFile
ConnectNamedPipe
EnumResourceTypesA
GetStdHandle
VerifyVersionInfoA
GlobalGetAtomNameA
CreatePipe
GetPrivateProfileStructA
GetTapeStatus
LocalFileTimeToFileTime
GetLocalTime
FileTimeToSystemTime
VirtualAlloc
InitializeCriticalSectionAndSpinCount
SetTimeZoneInformation
QueueUserWorkItem
OpenFile
FlushFileBuffers
SetTapePosition
MulDiv
InterlockedPushEntrySList
DeleteCriticalSection
AllocateUserPhysicalPages
GetSystemInfo
GetProcessPriorityBoost
ReadFileScatter
SetDefaultCommConfigA
FindResourceExA
IsBadHugeReadPtr
VirtualUnlock
DebugActiveProcessStop
GetProcessTimes
IsBadStringPtrA
SetEnvironmentVariableA
CompareStringW
CompareStringA
ReadFile
GetProcessHeap
SetEndOfFile
GetStringTypeW
GetStringTypeA
GetLocaleInfoA
HeapSize
LCMapStringW
LCMapStringA
GetTimeZoneInformation
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
MultiByteToWideChar
CreateFileA
SetStdHandle
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
LoadLibraryA
InterlockedExchange
FreeLibrary
InterlockedDecrement
LoadResource
GetSystemWindowsDirectoryA
GetProcAddress
SetThreadAffinityMask
GetModuleHandleA
LocalAlloc
GetLastError
HeapFree
HeapAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetSystemTimeAsFileTime
RtlUnwind
FindClose
FileTimeToLocalFileTime
GetDriveTypeA
FindFirstFileA
GetModuleHandleW
Sleep
ExitProcess
RaiseException
GetCommandLineA
GetStartupInfoA
CloseHandle
EnterCriticalSection
LeaveCriticalSection
SetHandleCount
GetFileType
SetFilePointer
HeapCreate
VirtualFree
HeapReAlloc
WriteFile
GetModuleFileNameA
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
TlsGetValue
TlsAlloc
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
GetFullPathNameA
GetCurrentDirectoryA
CreateDirectoryA
user32
GetKeyNameTextA
GetKeyboardType
AllowSetForegroundWindow
IsWindow
EndMenu
ToAscii
AttachThreadInput
GetCursorInfo
GetKBCodePage
EndPaint
GetAltTabInfoA
InsertMenuItemA
CheckMenuRadioItem
ReleaseDC
GetKeyboardLayoutNameA
SetWindowRgn
MoveWindow
FindWindowA
GetMessageExtraInfo
TrackPopupMenuEx
GetComboBoxInfo
GetFocus
IsCharLowerA
HiliteMenuItem
AnyPopup
GetProcessDefaultLayout
TrackPopupMenu
CheckRadioButton
InsertMenuA
SetActiveWindow
ReplyMessage
GetScrollInfo
ActivateKeyboardLayout
DrawEdge
SetPropA
GetWindowContextHelpId
GetClassInfoA
EmptyClipboard
GetListBoxInfo
FrameRect
SetClassWord
GetUpdateRect
advapi32
AddAuditAccessAceEx
AllocateLocallyUniqueId
AllocateAndInitializeSid
PrivilegeCheck
ObjectPrivilegeAuditAlarmA
LookupPrivilegeNameA
Sections
.text Size: 293KB - Virtual size: 293KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 100KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE