Static task
static1
Behavioral task
behavioral1
Sample
c9b6a127b5787a9a7da7da31ec42ae3cbabaf26b2994dc2379b8108255b7938d.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
c9b6a127b5787a9a7da7da31ec42ae3cbabaf26b2994dc2379b8108255b7938d.exe
Resource
win10v2004-20221111-en
General
-
Target
c9b6a127b5787a9a7da7da31ec42ae3cbabaf26b2994dc2379b8108255b7938d
-
Size
133KB
-
MD5
57339754dc315a9a44946b80fea78651
-
SHA1
a98b27cbc245a211d96a8a31345b56717a3125fb
-
SHA256
c9b6a127b5787a9a7da7da31ec42ae3cbabaf26b2994dc2379b8108255b7938d
-
SHA512
48aa71b866403fc1f42cb970800dd6da10963832a21a8e03cb34d0bdcf92b3b5fb97ec94ff32bfe11131feaa5b6df753f9c159b4a905d0f77dd09e1adc78f69d
-
SSDEEP
1536:b+1RJKp46vkNREw4n3yy3LbW7wmdlYyUFEL7qjh3rmKPNRsbAb:yzfREw4n3yy3LCwmzTSjZqMNRsEb
Malware Config
Signatures
Files
-
c9b6a127b5787a9a7da7da31ec42ae3cbabaf26b2994dc2379b8108255b7938d.exe windows x86
4cfbaeddf022e46ce0257b5724c20712
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shell32
SHGetSpecialFolderLocation
SHGetPathFromIDListW
SHGetFileInfoW
SHFileOperationW
ShellExecuteW
SHBrowseForFolderW
ole32
OleInitialize
CoTaskMemFree
CoCreateInstance
OleUninitialize
advapi32
RegCreateKeyExW
RegDeleteKeyW
RegDeleteValueW
RegSetValueExW
RegQueryValueExW
RegEnumValueW
RegOpenKeyExW
RegEnumKeyW
RegCloseKey
gdi32
SetTextColor
SetBkMode
CreateFontIndirectW
CreateBrushIndirect
DeleteObject
GetDeviceCaps
SetBkColor
SelectObject
version
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW
kernel32
InitializeCriticalSectionAndSpinCount
HeapAlloc
VirtualAlloc
HeapReAlloc
RtlUnwind
HeapSize
FreeLibrary
SetHandleCount
ResetWriteWatch
GetNamedPipeHandleStateA
GetWriteWatch
FlushViewOfFile
LockFileEx
GetCurrentProcess
GetProcessAffinityMask
MapUserPhysicalPagesScatter
GetProcessPriorityBoost
GetThreadPriority
ConvertThreadToFiber
TlsSetValue
GetNamedPipeInfo
GetFileAttributesExW
GetCommTimeouts
ReplaceFileA
IsWow64Process
ConvertFiberToThread
OpenProcess
SetCommState
ReleaseMutex
PeekNamedPipe
GetCurrentThreadId
GetStdHandle
RequestDeviceWakeup
SetTapePosition
GetProcessHandleCount
LockResource
GetPriorityClass
FindNextChangeNotification
DeactivateActCtx
GlobalUnfix
PulseEvent
GetAtomNameW
GetProcessIoCounters
SetPriorityClass
FindFirstFileExW
CreateTapePartition
GetCommandLineA
GetModuleFileNameW
GetThreadTimes
FreeResource
GetNumaNodeProcessorMask
CreateJobSet
SetHandleInformation
FindVolumeClose
SetCommBreak
GlobalWire
ContinueDebugEvent
SetFileApisToOEM
LocalCompact
CancelWaitableTimer
FreeEnvironmentStringsA
SetSystemPowerState
EscapeCommFunction
GlobalUnWire
GetLastError
lstrcpynA
DeleteFileW
FindFirstFileW
FindNextFileW
FindClose
SetFilePointer
MultiByteToWideChar
ReadFile
WriteFile
MulDiv
lstrlenA
WideCharToMultiByte
GetPrivateProfileStringW
WritePrivateProfileStringW
LoadLibraryExW
GetModuleHandleW
GlobalFree
GetExitCodeProcess
WaitForSingleObject
GlobalAlloc
ExpandEnvironmentStringsW
lstrcmpW
lstrcmpiW
lstrcmpA
RemoveDirectoryW
lstrcpyA
GetVersion
GetSystemDirectoryW
GetVersionExW
lstrcpyW
GetModuleHandleA
LoadLibraryA
GetProcAddress
lstrcatW
GetTempFileNameW
lstrcmpiA
CreateProcessW
LoadLibraryW
CreateThread
GlobalLock
GlobalUnlock
GetDiskFreeSpaceW
lstrcpynW
lstrlenW
CloseHandle
SetErrorMode
GetCommandLineW
GetTempPathW
GetWindowsDirectoryW
ExitProcess
CopyFileW
GetFileSize
CreateFileW
GetTickCount
Sleep
SetFileAttributesW
CreateDirectoryW
GetFileAttributesW
SetCurrentDirectoryW
MoveFileW
GetFullPathNameW
GetShortPathNameW
SearchPathW
CompareFileTime
SetFileTime
GetStartupInfoA
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsFree
SetLastError
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetModuleFileNameA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetFileType
DeleteCriticalSection
HeapCreate
VirtualFree
HeapFree
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
LeaveCriticalSection
EnterCriticalSection
GetLocaleInfoA
Sections
.text Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 55KB - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ