Static task
static1
Behavioral task
behavioral1
Sample
f9c6f991613c61f9d14008632026fbcf5d77cc45c38bf26256928968b7e409cd.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f9c6f991613c61f9d14008632026fbcf5d77cc45c38bf26256928968b7e409cd.exe
Resource
win10v2004-20220901-en
General
-
Target
f9c6f991613c61f9d14008632026fbcf5d77cc45c38bf26256928968b7e409cd
-
Size
152KB
-
MD5
37acfde62c4cb20a3bedcb43f2248294
-
SHA1
ff420e387ad0f890be161187e079329aa273c8d1
-
SHA256
f9c6f991613c61f9d14008632026fbcf5d77cc45c38bf26256928968b7e409cd
-
SHA512
22bb83dcf951dad1e841489a7f8f0b5f90a90cc89a8a563dad13fc4ced9e9cc83b3730f254c8907e31db9f38e985b5fb771e8b046585a97dc16745e2e699083c
-
SSDEEP
3072:RdpT4HdHtdRvmmQWBM0JEpg36h9PdC18+Vq021UKGk7hIMOhzvmnEBssO:VkHltdRvpQgJEpg36xCbd2yfkDOhr+/t
Malware Config
Signatures
Files
-
f9c6f991613c61f9d14008632026fbcf5d77cc45c38bf26256928968b7e409cd.exe windows x86
193958e02cfb5b1b51ffb73a801e9e26
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
IntersectRect
SetWindowPlacement
DrawIcon
GetWindow
CharUpperW
UnregisterClassW
MessageBoxA
EnumChildWindows
TrackPopupMenu
UnionRect
GetMessageA
GetTopWindow
MsgWaitForMultipleObjects
SetFocus
UnregisterClassA
LoadMenuW
PostMessageW
msvcrt
fflush
__p__commode
_exit
isdigit
_CxxThrowException
__getmainargs
realloc
exit
__set_app_type
_errno
kernel32
QueryPerformanceFrequency
GlobalAlloc
FreeResource
IsProcessorFeaturePresent
SetFilePointer
OutputDebugStringA
FindClose
LocalFileTimeToFileTime
HeapAlloc
lstrcmpW
GetTimeFormatW
GlobalFree
TlsGetValue
LoadLibraryW
GetFullPathNameW
GlobalFindAtomW
lstrcmpiW
GetCPInfo
GetModuleFileNameA
GetStartupInfoA
lstrcmpiA
GetSystemDirectoryA
GlobalSize
GetStdHandle
UnlockFile
GetModuleHandleW
CreateFileW
GetShortPathNameW
LockResource
CompareFileTime
MulDiv
advapi32
RegQueryInfoKeyA
RegEnumValueA
RegDeleteKeyA
RegEnumKeyExA
gdi32
SetWindowExtEx
CreateRectRgn
DeleteDC
CreateDIBSection
CreatePen
GetTextExtentPoint32W
GetObjectA
Sections
.text Size: 99KB - Virtual size: 99KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 39KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ