?InitializeCriticalSectionAndSpinCountHDhdhHGHdhds@@YGKEPA_WG@Z
Static task
static1
Behavioral task
behavioral1
Sample
fa9884e431e0c03b5c71f5ceb9c6f5694bb2fb9c1429c67278a52fe1df19e77e.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
fa9884e431e0c03b5c71f5ceb9c6f5694bb2fb9c1429c67278a52fe1df19e77e.exe
Resource
win10v2004-20221111-en
General
-
Target
fa9884e431e0c03b5c71f5ceb9c6f5694bb2fb9c1429c67278a52fe1df19e77e
-
Size
216KB
-
MD5
42ed9c7b80f051f0bf7b6114690fea89
-
SHA1
74ff0cbeca54e4ce20290ce2771fe88aafef27ce
-
SHA256
fa9884e431e0c03b5c71f5ceb9c6f5694bb2fb9c1429c67278a52fe1df19e77e
-
SHA512
b358d46774189ca0feec433f13dea0a9cfabe0a6afc5ccaab19d7cae02869332368965b002dbafe7a116d083029d70f8a5c5ed1449309813fdadae549e6e1217
-
SSDEEP
6144:ATa6bViMJNLNjR3jdXfmVwcMcbYsx+SJTPxjR:b1WN9R3BXeCW9x++1R
Malware Config
Signatures
Files
-
fa9884e431e0c03b5c71f5ceb9c6f5694bb2fb9c1429c67278a52fe1df19e77e.exe windows x86
64aa11c49fb91820d3805a77d396b94a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
atol
_controlfp
__set_app_type
__p__fmode
__p__commode
_amsg_exit
tolower
gmtime
_initterm
_acmdln
wcscat
mbstowcs
exit
_ismbblead
isalnum
_XcptFilter
iswdigit
mktime
_exit
strspn
_cexit
setvbuf
__setusermatherr
__getmainargs
comctl32
ImageList_Create
ImageList_LoadImageW
ImageList_GetIcon
user32
SetCaretPos
BeginPaint
WaitForInputIdle
IsZoomed
CharLowerW
SetWindowLongA
PostMessageW
InsertMenuA
GetMessageExtraInfo
EnableWindow
InvertRect
AttachThreadInput
ArrangeIconicWindows
IsCharAlphaNumericW
DrawEdge
CreateAcceleratorTableW
CharLowerBuffW
LoadCursorA
MessageBoxA
SetScrollPos
GetParent
WaitMessage
DrawIcon
FrameRect
EnumThreadWindows
SetScrollRange
CreateCursor
CreateDialogIndirectParamW
CharToOemA
SystemParametersInfoW
DrawFrameControl
SetActiveWindow
GetNextDlgTabItem
GetDlgItemTextA
GetSubMenu
kernel32
MoveFileW
CreateMailslotW
CancelIo
IsDBCSLeadByte
FindResourceW
lstrcatW
LockFile
GetStartupInfoA
RemoveDirectoryA
GetModuleHandleA
SetThreadPriority
WaitForSingleObjectEx
DuplicateHandle
lstrcmpiA
FileTimeToDosDateTime
lstrlenW
GetCommProperties
GetCurrentThread
advapi32
LookupPrivilegeValueA
gdi32
PtVisible
SetTextAlign
CreatePolygonRgn
GetTextColor
CreateDiscardableBitmap
PatBlt
BeginPath
RemoveFontResourceW
GetStockObject
SetViewportOrgEx
RectInRegion
SetDIBitsToDevice
GetWindowOrgEx
CreateDIBitmap
GetNearestColor
StartDocW
EndPath
Exports
Exports
Sections
.text Size: 177KB - Virtual size: 176KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.diag_y Size: 512B - Virtual size: 69B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.diag_x Size: 512B - Virtual size: 28B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idat Size: 512B - Virtual size: 416B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.div Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.plus Size: 1024B - Virtual size: 643B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.minus Size: 512B - Virtual size: 140B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ