Static task
static1
Behavioral task
behavioral1
Sample
c9f675676ee20dd3d3b732eb986d92fc57880d2ec9d03a0ba36056d7599f3d13.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
c9f675676ee20dd3d3b732eb986d92fc57880d2ec9d03a0ba36056d7599f3d13.exe
Resource
win10v2004-20220901-en
General
-
Target
c9f675676ee20dd3d3b732eb986d92fc57880d2ec9d03a0ba36056d7599f3d13
-
Size
140KB
-
MD5
08850f418d9995154b078e68c2051da0
-
SHA1
3f1c9613242b69fb9ec574b0e561d1b349a0914a
-
SHA256
c9f675676ee20dd3d3b732eb986d92fc57880d2ec9d03a0ba36056d7599f3d13
-
SHA512
e4f5f6d5d35473b7c7efc5b00c72122af5bf895ed9cffcf4d9357aaea1639e41b432e9354254e8d0ca56e99046ae13f463328f5bb5186cf213800394d6e87cd3
-
SSDEEP
3072:PkP0Y/oMvoMelAtAk7wPMPb7GbJvTpp4ancTiYIwBa39sPNN:MPh/qMeRLkjSb5TpX6TatsPNN
Malware Config
Signatures
Files
-
c9f675676ee20dd3d3b732eb986d92fc57880d2ec9d03a0ba36056d7599f3d13.exe windows x86
719455ede6dfb8f60400ff23313d9806
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
GetProcAddress
CloseHandle
GetTempPathA
GetVersionExA
LoadLibraryA
RtlUnwind
CreateFileA
VirtualProtect
GetModuleHandleW
GetStartupInfoW
lstrlenW
crtdll
__GetMainArgs
exit
raise
signal
gdi32
CreateSolidBrush
BitBlt
SelectObject
DeleteObject
SetTextColor
CreateCompatibleDC
DeleteDC
CreateFontIndirectW
advapi32
RegOpenKeyExW
RegSetValueExW
RegQueryValueExW
RegCloseKey
user32
LoadIconW
GetWindowRect
ShowWindow
SetWindowLongW
LoadStringW
SendMessageW
GetDlgItem
wsprintfW
GetWindowLongW
MessageBoxW
ReleaseDC
GetDC
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 127KB - Virtual size: 364KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 322B - Virtual size: 322B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.reloc1 Size: 302B - Virtual size: 302B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE