Static task
static1
Behavioral task
behavioral1
Sample
9862aebb7d044baaaa86c944d10b19012717cab4511b575539a2e0680a70d4b8.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
9862aebb7d044baaaa86c944d10b19012717cab4511b575539a2e0680a70d4b8.exe
Resource
win10v2004-20220812-en
General
-
Target
9862aebb7d044baaaa86c944d10b19012717cab4511b575539a2e0680a70d4b8
-
Size
520KB
-
MD5
933161792a4f478a8d291a58be2576b0
-
SHA1
a77690711d0d3fa92edc44a1c148f2d71d35276d
-
SHA256
9862aebb7d044baaaa86c944d10b19012717cab4511b575539a2e0680a70d4b8
-
SHA512
116e63950ddd7e6b9271f04d9977a94643e0f24349ca38c0ed9ba97557f213b2d8519617166b96042ab74e193f30e8b518b6e9898c2b832b07d3c865702acc12
-
SSDEEP
6144:+kDX7yqomaAbEJAP2p+BbXOWZVue7h9UpAMVOR301xSsQLH5Ad:+kDX7hNaA4AvBbXKetCpAEORaSsPd
Malware Config
Signatures
Files
-
9862aebb7d044baaaa86c944d10b19012717cab4511b575539a2e0680a70d4b8.exe windows x86
78726a4b41ec03d9c17d9d08bc5276e8
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
wsock32
connect
htons
inet_ntoa
socket
WSAStartup
select
__WSAFDIsSet
getsockopt
send
WSAGetLastError
closesocket
gethostbyname
kernel32
SetEnvironmentVariableA
CompareStringW
CompareStringA
CreateFileA
IsValidLocale
EnumSystemLocalesA
CloseHandle
CreateProcessW
MultiByteToWideChar
GetFileAttributesW
LocalFree
FormatMessageA
GetLastError
GetVersionExW
GlobalMemoryStatusEx
GetSystemInfo
GetCurrentProcess
GetProcAddress
GetModuleHandleW
LockResource
LoadResource
FindResourceExW
WideCharToMultiByte
GetUserDefaultUILanguage
Sleep
HeapFree
HeapAlloc
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeW
FindFirstFileW
HeapReAlloc
GetVersionExA
GetProcessHeap
GetStartupInfoW
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapDestroy
HeapCreate
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
FatalAppExitA
EnterCriticalSection
VirtualAlloc
ReadFile
GetModuleHandleA
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
RtlUnwind
GetFullPathNameW
GetCurrentDirectoryA
SetCurrentDirectoryA
HeapSize
GetModuleFileNameW
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
GetCurrentThread
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSection
SetStdHandle
GetConsoleCP
GetConsoleMode
FlushFileBuffers
SetFilePointer
SetConsoleCtrlHandler
FreeLibrary
InterlockedExchange
LoadLibraryA
CreateFileW
GetTimeZoneInformation
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringA
LCMapStringW
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetLocaleInfoA
GetLocaleInfoW
SetEndOfFile
GetDriveTypeA
GetFullPathNameA
GetStringTypeA
GetStringTypeW
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
user32
GetSystemMenu
LoadAcceleratorsW
PeekMessageW
TranslateAcceleratorW
GetMessageW
TranslateMessage
DispatchMessageW
MessageBoxW
MessageBoxA
MoveWindow
ReleaseDC
DrawTextW
GetDC
GetWindowTextW
GetClientRect
EndDialog
PostQuitMessage
EnableWindow
SendMessageW
GetDlgItemTextW
UpdateWindow
ShowWindow
GetWindowRect
EnableMenuItem
LoadIconW
CreateWindowExW
GetSystemMetrics
DestroyWindow
DialogBoxParamW
DefWindowProcW
EndPaint
BeginPaint
RegisterClassExW
LoadCursorW
gdi32
CreateSolidBrush
SetTextColor
SetBkColor
GetStockObject
SelectObject
Sections
.text Size: 112KB - Virtual size: 109KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 380KB - Virtual size: 377KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ