Static task
static1
Behavioral task
behavioral1
Sample
b9da8455708fe2c8754691f8dbb20adab434c16721cea547fbec15749bb51299.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b9da8455708fe2c8754691f8dbb20adab434c16721cea547fbec15749bb51299.exe
Resource
win10v2004-20221111-en
General
-
Target
b9da8455708fe2c8754691f8dbb20adab434c16721cea547fbec15749bb51299
-
Size
227KB
-
MD5
f6882f4e9b4fbfc7e2e582fd94a5ac23
-
SHA1
1e6fcc8463128bc75a88589fce652bedc17507ef
-
SHA256
b9da8455708fe2c8754691f8dbb20adab434c16721cea547fbec15749bb51299
-
SHA512
8aab5df33ee5b5756e06738b633aeb3250b7d42b24c17e8314964590159bb998207f596e353072056f7d25ad454fd2dc0f69c54c855714f91ed8c0fdf468b6ce
-
SSDEEP
6144:tRSLolbRP+13E+ruEjATb9SvTeNfjKR4AyG1:tRSLolbRP+10+6EKiqRtAB1
Malware Config
Signatures
Files
-
b9da8455708fe2c8754691f8dbb20adab434c16721cea547fbec15749bb51299.exe windows x86
7b882630f50fe5471657024b96812804
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentProcess
TerminateProcess
GetModuleFileNameW
FindClose
GetCurrentThreadId
MultiByteToWideChar
GetLastError
CloseHandle
WideCharToMultiByte
VirtualQuery
HeapFree
HeapReAlloc
HeapAlloc
GetProcessHeap
CreateEventW
SetEvent
ResetEvent
GetSystemTimeAsFileTime
WriteConsoleW
HeapSize
CreateFileW
FlushFileBuffers
GetStringTypeW
SetStdHandle
FindNextFileW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FindFirstFileExW
LCMapStringW
GetConsoleMode
GetConsoleOutputCP
GetFileType
SetFilePointerEx
DecodePointer
WriteFile
GetStdHandle
GetCommandLineA
GetModuleHandleExW
RtlUnwind
RaiseException
LoadLibraryExW
GetCommandLineW
SetLastError
FreeLibrary
GetProcAddress
LoadLibraryW
IsDebuggerPresent
ExitProcess
DeleteCriticalSection
FindResourceW
LoadResource
LockResource
FreeResource
InitializeCriticalSection
SizeofResource
GlobalUnlock
GlobalLock
GlobalFree
GlobalAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
EncodePointer
InitializeSListHead
GetCurrentProcessId
QueryPerformanceCounter
GetStartupInfoW
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetModuleHandleW
WaitForSingleObjectEx
LeaveCriticalSection
EnterCriticalSection
user32
GetDesktopWindow
LoadCursorW
LoadIconW
LoadStringW
LoadImageW
GetMessageW
TranslateMessage
DispatchMessageW
ReleaseDC
GetDC
MonitorFromWindow
gdi32
CreateFontIndirectW
CreateDIBSection
SetDIBColorTable
CreateCompatibleDC
GetStockObject
GetDeviceCaps
DeleteDC
GetObjectW
DeleteObject
SelectObject
ole32
CreateStreamOnHGlobal
CoUninitialize
CoInitializeEx
comctl32
ImageList_Destroy
ImageList_Create
ImageList_AddMasked
gdiplus
GdipDrawImageI
GdipCreateBitmapFromScan0
GdipCreateBitmapFromFile
GdipGetImageWidth
GdipGetImagePalette
GdiplusStartup
GdiplusShutdown
GdipGetImageHeight
GdipGetImagePaletteSize
GdipCloneImage
GdipBitmapUnlockBits
GdipCreateBitmapFromStream
GdipAlloc
GdipDisposeImage
GdipGetImagePixelFormat
GdipFree
GdipBitmapLockBits
GdipGetImageGraphicsContext
GdipDeleteGraphics
Sections
.text Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 34KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gfids Size: 512B - Virtual size: 228B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 79KB - Virtual size: 79KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ