Static task
static1
Behavioral task
behavioral1
Sample
9038389713ba47578c1d1cff1097b4766226f695933998a1bb1bb4aa79b896b6.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
9038389713ba47578c1d1cff1097b4766226f695933998a1bb1bb4aa79b896b6.exe
Resource
win10v2004-20220812-en
General
-
Target
9038389713ba47578c1d1cff1097b4766226f695933998a1bb1bb4aa79b896b6
-
Size
173KB
-
MD5
3898c8157f05bd3e28e5c03e2ffa1fdb
-
SHA1
fd90d5371c15dcfbcca22bca8d102c51f32d9399
-
SHA256
9038389713ba47578c1d1cff1097b4766226f695933998a1bb1bb4aa79b896b6
-
SHA512
2dc2e0fa310ea554acd404ab5decdc03db5b4ae05eadc23785719ba0d3a0e936a8396c23c800faa7f46aa9d571f8af8add70ec57e16be9c2f317c79367c18f5f
-
SSDEEP
3072:5SIEHjP2r/A3fcbDjuwdvHJlHqISiWflrG0EK0LVuZdSq3l2gN8OV7uV3E4tfKY:5SIUjp3fcCwNHJlHZLW00j0LVu7Sq3nH
Malware Config
Signatures
Files
-
9038389713ba47578c1d1cff1097b4766226f695933998a1bb1bb4aa79b896b6.exe windows x86
a09645b98191673e5b40ff8165fcda8a
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
GetTextMetricsA
SelectObject
GetTextExtentPointA
DeleteObject
GetDeviceCaps
CreateFontIndirectA
kernel32
InitializeCriticalSection
SetHandleCount
GetCPInfoExW
RaiseException
HeapSize
FreeEnvironmentStringsA
GetStdHandle
GetVersionExA
UnhandledExceptionFilter
GetLocaleInfoA
FreeEnvironmentStringsW
WriteFile
TlsGetValue
InterlockedIncrement
EnumResourceTypesA
GetStartupInfoA
GetFileType
GetEnvironmentStrings
GetOEMCP
QueryPerformanceCounter
MultiByteToWideChar
LeaveCriticalSection
TlsSetValue
GetLastError
GetACP
GetComputerNameW
GetEnvironmentStringsW
InterlockedExchange
GetThreadLocale
DeleteCriticalSection
WideCharToMultiByte
GetCPInfo
GetTickCount
lstrlenW
EnterCriticalSection
GetCurrentProcessId
ole32
CoGetMalloc
CoTaskMemAlloc
CoTaskMemFree
StringFromGUID2
CoCreateInstance
CoTaskMemRealloc
shell32
SHGetFolderPathW
newdev
UpdateDriverForPlugAndPlayDevicesW
msimg32
AlphaBlend
TransparentBlt
Sections
.text Size: 103KB - Virtual size: 102KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.tls Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 66KB - Virtual size: 66KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 252KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ