Static task
static1
Behavioral task
behavioral1
Sample
f9fb341d065d4c8c58fc42b0d593d7f3cb4a18e704a9448ec71398753a88446a.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
f9fb341d065d4c8c58fc42b0d593d7f3cb4a18e704a9448ec71398753a88446a.exe
Resource
win10v2004-20220901-en
General
-
Target
f9fb341d065d4c8c58fc42b0d593d7f3cb4a18e704a9448ec71398753a88446a
-
Size
756KB
-
MD5
7e3d3229c3f4f3a4046742ce0acbab40
-
SHA1
391ab2cefe91411826b42f4141568def5f9a8e31
-
SHA256
f9fb341d065d4c8c58fc42b0d593d7f3cb4a18e704a9448ec71398753a88446a
-
SHA512
3e515f5e9cf56e54953a9da9d8faaed43b402e0f7a47f6154d583009deaecce86f911d7ad4758a91dbfb9725bdc1bf00ce79c2acbd91603d36e837ab258d8114
-
SSDEEP
12288:anxLBnBihJJpVT9DnUp5SBlAZM1Ws+3dEMMaPasf9CzHTWaKP+XVQsNBs1jC4k1:Cdnch39YSga1M3HAzD9XVFNBhmg/k
Malware Config
Signatures
Files
-
f9fb341d065d4c8c58fc42b0d593d7f3cb4a18e704a9448ec71398753a88446a.exe windows x86
989619f167a787626089231d02b87f17
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
ImageList_Remove
ImageList_GetIconSize
ImageList_DragMove
ImageList_GetImageRect
ImageList_Read
DestroyPropertySheetPage
ImageList_DrawIndirect
ImageList_Write
ImageList_ReplaceIcon
ImageList_SetBkColor
ImageList_GetImageInfo
InitCommonControlsEx
ImageList_DragLeave
ImageList_DragEnter
ImageList_GetBkColor
ImageList_SetDragCursorImage
DrawStatusText
CreateMappedBitmap
DrawInsert
ImageList_DragShowNolock
CreateToolbarEx
MakeDragList
CreatePropertySheetPageA
ImageList_GetFlags
kernel32
SetEvent
GetFileAttributesW
CreateFileMappingA
ReadConsoleA
RemoveDirectoryA
GetCPInfo
RtlUnwind
Sleep
GetSystemTime
OpenFileMappingA
ReadFileEx
LockFile
OpenMutexA
GetTickCount
GetCurrentProcessId
GetProcAddress
TransactNamedPipe
ExitProcess
GetProfileIntW
GetStdHandle
GetProcessAffinityMask
AllocConsole
OpenFile
LocalHandle
UnhandledExceptionFilter
IsBadWritePtr
GetCurrentThreadId
EnterCriticalSection
GlobalFindAtomA
CloseHandle
GetCurrentThread
SetConsoleOutputCP
FreeEnvironmentStringsA
GetVersionExA
lstrlenW
CreateEventW
WideCharToMultiByte
HeapAlloc
CompareStringW
ExpandEnvironmentStringsA
ReadConsoleW
GetWindowsDirectoryW
FileTimeToLocalFileTime
MultiByteToWideChar
ReadFile
GetStartupInfoA
TlsAlloc
GlobalAddAtomA
InterlockedDecrement
SetComputerNameA
GlobalFindAtomW
SetStdHandle
FormatMessageA
SetEnvironmentVariableA
HeapCreate
GetEnvironmentVariableW
TlsSetValue
OutputDebugStringW
GetOEMCP
FreeEnvironmentStringsW
FindResourceW
lstrcmpi
CreateMutexA
WaitForMultipleObjects
LocalFileTimeToFileTime
OpenSemaphoreW
GetComputerNameW
LoadLibraryExA
HeapReAlloc
GetConsoleMode
EnumCalendarInfoExW
GetStringTypeA
GetModuleFileNameA
GetPrivateProfileStringW
HeapFree
LoadLibraryA
ReadConsoleOutputCharacterW
GetVersion
SetHandleCount
VirtualQuery
GetFileType
GetModuleHandleA
GetLogicalDriveStringsW
SetFileAttributesA
LCMapStringW
DeleteFileA
SetFilePointer
InitializeCriticalSection
GetStringTypeW
GetCurrentProcess
EnumResourceTypesA
GetLocalTime
SetFileAttributesW
CompareFileTime
GetMailslotInfo
WriteFile
CopyFileA
HeapLock
TerminateProcess
FlushFileBuffers
GetLastError
DeleteCriticalSection
FindNextFileW
GetFileAttributesExA
GetTimeZoneInformation
GetThreadPriority
GetFullPathNameA
DeleteAtom
EnumResourceNamesW
ExitThread
SetConsoleTextAttribute
WriteConsoleInputA
CompareStringA
LeaveCriticalSection
TlsGetValue
GetPrivateProfileSectionA
DosDateTimeToFileTime
CommConfigDialogA
TlsFree
GetNumberFormatA
LCMapStringA
SetLastError
CreateWaitableTimerW
GetSystemInfo
VirtualFree
InterlockedIncrement
lstrcpynA
GetProcAddress
InterlockedExchange
GetSystemTimeAsFileTime
GetEnvironmentStrings
QueryPerformanceCounter
GlobalHandle
GetACP
HeapDestroy
GetCommandLineA
VirtualAlloc
GetEnvironmentStringsW
ReadConsoleOutputCharacterA
user32
CloseWindow
GetWindowContextHelpId
CreateWindowExA
LoadCursorFromFileA
GetClassNameA
DestroyWindow
CopyAcceleratorTableA
OpenClipboard
ShowWindow
MapVirtualKeyW
EnumWindowStationsA
GetClassInfoExW
GetMenuItemInfoA
BringWindowToTop
WINNLSEnableIME
MapVirtualKeyA
IsDialogMessageA
ReleaseDC
WindowFromPoint
MessageBoxA
WINNLSGetIMEHotkey
GetInputState
SetDeskWallpaper
SystemParametersInfoW
RegisterClassA
GetTopWindow
GetUpdateRect
DdeCreateStringHandleA
RegisterClassExA
SetWindowsHookExW
GetWindowRect
CheckMenuItem
SetPropW
LoadAcceleratorsW
GetAltTabInfo
SetWindowTextW
DefWindowProcW
EnableScrollBar
IsDialogMessageW
EndMenu
UnregisterDeviceNotification
GetShellWindow
GetMessagePos
RemoveMenu
LoadCursorFromFileW
CountClipboardFormats
DdeGetLastError
Sections
.text Size: 188KB - Virtual size: 186KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 404KB - Virtual size: 401KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 136KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ