Static task
static1
Behavioral task
behavioral1
Sample
9b70f7fe2ed05efaa2f091020c3503c98416cbcd484e4fdc5497ef51aaeb714b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9b70f7fe2ed05efaa2f091020c3503c98416cbcd484e4fdc5497ef51aaeb714b.exe
Resource
win10v2004-20220901-en
General
-
Target
9b70f7fe2ed05efaa2f091020c3503c98416cbcd484e4fdc5497ef51aaeb714b
-
Size
103KB
-
MD5
0a9ab6e5db6cb856fe13a5958904dc60
-
SHA1
9e83710d929b555e17b30838193508f7a48af620
-
SHA256
9b70f7fe2ed05efaa2f091020c3503c98416cbcd484e4fdc5497ef51aaeb714b
-
SHA512
072039604405c70a6e0ae103f0034c64e9355a04b168f3cb6200b94cf2d660651a1243208b81ff19265fcf73a0a18393c304980783c8a7696e510589048fa3ce
-
SSDEEP
1536:EDhC1n3nvvILuFDhtEw39BA6DKz1iCF0sexVzeBLAWqiXnSDGS95t+YJKvsa+L:EDhC1n3nXNFDhdnA6sBoaSD95tFJKvs
Malware Config
Signatures
Files
-
9b70f7fe2ed05efaa2f091020c3503c98416cbcd484e4fdc5497ef51aaeb714b.exe windows x86
552feeca3d51e8a6c1e8009916090958
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
clusapi
ClusterRegSetKeySecurity
CreateClusterResourceType
ClusterGroupCloseEnum
OfflineClusterResource
GetClusterResourceState
ClusterResourceOpenEnum
OpenClusterGroup
GetClusterResourceNetworkName
ClusterRegEnumValue
ClusterEnum
SetClusterGroupNodeList
ClusterRegQueryValue
OpenClusterNode
ClusterRegEnumKey
CloseClusterNetwork
GetClusterNetInterface
GetClusterNodeId
SetClusterNetworkPriorityOrder
ResumeClusterNode
ChangeClusterResourceGroup
CloseClusterNetInterface
GetClusterNetworkState
SetClusterQuorumResource
ClusterNetworkControl
ClusterGroupEnum
GetClusterInformation
GetClusterNetworkId
EvictClusterNode
ClusterRegQueryInfoKey
CreateClusterGroup
GetClusterNetInterfaceState
DeleteClusterGroup
ClusterRegCloseKey
OpenClusterNetwork
OnlineClusterResource
ClusterNetworkCloseEnum
CloseClusterNode
gdi32
ExtTextOutA
RectVisible
GetObjectW
CloseEnhMetaFile
CloseFigure
GetRgnBox
GetStockObject
CreateHalftonePalette
CreateMetaFileW
GetWindowOrgEx
ScaleWindowExtEx
DeleteDC
Rectangle
PlayEnhMetaFileRecord
GetPaletteEntries
StrokeAndFillPath
GetWindowExtEx
SetTextAlign
CreateHatchBrush
CreateEllipticRgnIndirect
TextOutW
GetCurrentPositionEx
EnumFontsW
RectInRegion
GetClipRgn
GetNearestPaletteIndex
GetTextExtentPointW
WidenPath
GdiComment
GetObjectA
GetDCOrgEx
GetGraphicsMode
GetCharABCWidthsA
SelectClipPath
SetMapperFlags
DPtoLP
GetOutlineTextMetricsA
PtInRegion
PolyPolygon
CopyMetaFileW
SetEnhMetaFileBits
SetPolyFillMode
SetAbortProc
PolyBezier
GetTextExtentPointA
GetBoundsRect
GetViewportExtEx
LineTo
GetEnhMetaFileHeader
GetStretchBltMode
OffsetClipRgn
CreatePenIndirect
CreateFontW
SetColorAdjustment
SetViewportOrgEx
CreateCompatibleBitmap
SetBoundsRect
ExtCreatePen
GetClipBox
CreateEnhMetaFileW
SetTextJustification
SetTextCharacterExtra
SetMapMode
CopyEnhMetaFileW
GetNearestColor
DeleteEnhMetaFile
FillRgn
SetDIBColorTable
GetPath
GetBkMode
ArcTo
EnumFontFamiliesExW
FlattenPath
GetKerningPairsA
CreateDIBitmap
GetGlyphOutlineA
UnrealizeObject
CreateBrushIndirect
CreatePatternBrush
AnimatePalette
ExtEscape
CombineRgn
EqualRgn
SelectClipRgn
CreateDIBSection
CreateCompatibleDC
PlayEnhMetaFile
BitBlt
ExtSelectClipRgn
GetDeviceCaps
CreateFontIndirectA
GetTextColor
FillPath
ScaleViewportExtEx
GetEnhMetaFileW
CreateEnhMetaFileA
CreateSolidBrush
CreateBitmap
GetWorldTransform
CopyMetaFileA
PlayMetaFile
GetBitmapDimensionEx
GetDIBColorTable
CreateBitmapIndirect
SetWindowOrgEx
GetTextMetricsW
SetWindowExtEx
PtVisible
MoveToEx
GetTextCharsetInfo
GetSystemPaletteEntries
CreatePen
Chord
GetGlyphOutlineW
GetTextMetricsA
InvertRgn
SetBkColor
SetGraphicsMode
StrokePath
Ellipse
pdh
PdhGetCounterInfoW
PdhGetRawCounterValue
PdhGetFormattedCounterArrayA
PdhSelectDataSourceA
PdhMakeCounterPathA
PdhCloseLog
PdhGetCounterTimeBase
PdhParseCounterPathW
PdhValidatePathW
PdhLookupPerfNameByIndexW
PdhUpdateLogW
PdhSetQueryTimeRange
PdhComputeCounterStatistics
PdhGetCounterInfoA
PdhParseInstanceNameW
PdhGetRawCounterArrayW
PdhEnumObjectsA
PdhConnectMachineW
PdhEnumMachinesW
PdhUpdateLogA
advapi32
RegOpenKeyExW
NotifyBootConfigStatus
LockServiceDatabase
EnumDependentServicesA
oleaut32
VarCyFromDate
msvcrt
_controlfp
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
_except_handler3
kernel32
GetStartupInfoA
GetModuleHandleA
GetLongPathNameA
comctl32
ord16
Sections
.text Size: 60KB - Virtual size: 59KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 240B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ