Static task
static1
Behavioral task
behavioral1
Sample
9ff6c0ee15a5bef2a2e27b81f17a70b4256c4f45cc0e3eb453a462c0e4a94281.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
9ff6c0ee15a5bef2a2e27b81f17a70b4256c4f45cc0e3eb453a462c0e4a94281.exe
Resource
win10v2004-20220812-en
General
-
Target
9ff6c0ee15a5bef2a2e27b81f17a70b4256c4f45cc0e3eb453a462c0e4a94281
-
Size
4.1MB
-
MD5
259693b1e2b96a13b45ba309975081c9
-
SHA1
fc39938b3e37cca646c8ffac656556b4a629958a
-
SHA256
9ff6c0ee15a5bef2a2e27b81f17a70b4256c4f45cc0e3eb453a462c0e4a94281
-
SHA512
cf9e456e7d68bc72e78b9c0e12325273e9e798a91e2269a0ff9c3fd8f3b37e30684e2d720739cb74c8aeaeda279b51178efd437f245091d85d74b254047adec5
-
SSDEEP
98304:xuoi5tP8qj/LT7MCAbPcUEceDfAxtUR+nCysl7YgotOts9QY6HO7n2352qzUQBG0:IoiTPdLqEc5+S
Malware Config
Signatures
Files
-
9ff6c0ee15a5bef2a2e27b81f17a70b4256c4f45cc0e3eb453a462c0e4a94281.exe windows x86
62c19f7642ed5fa24f333cf7a50011f2
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetTempPathA
DisableThreadLibraryCalls
GetFileAttributesA
GetCurrentProcess
WideCharToMultiByte
MultiByteToWideChar
LocalFileTimeToFileTime
HeapAlloc
Sleep
EnterCriticalSection
IsBadWritePtr
DeleteCriticalSection
GetProcAddress
GetProcessHeap
CreateMutexA
GetModuleHandleExW
GetLastError
GetTickCount
InterlockedCompareExchange
ExitProcess
SetLastError
GetVersionExA
GetModuleHandleA
VirtualAlloc
VirtualFree
LoadLibraryA
HeapFree
RemoveDirectoryA
ExitThread
FileTimeToLocalFileTime
GetCurrentThreadId
CloseHandle
AddVectoredExceptionHandler
InitializeCriticalSection
WriteConsoleW
CreateFileW
GetConsoleCP
FlushFileBuffers
SetStdHandle
LoadLibraryW
OutputDebugStringW
LCMapStringW
HeapReAlloc
LoadLibraryExW
GetModuleHandleW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
TerminateProcess
SetEndOfFile
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
ReadFile
GetSystemTimeAsFileTime
RtlUnwind
GetCommandLineA
InterlockedDecrement
AreFileApisANSI
HeapSize
IsDebuggerPresent
InterlockedIncrement
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
RaiseException
GetStdHandle
WriteFile
GetModuleFileNameW
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
SetFilePointer
SetFilePointerEx
GetConsoleMode
ReadConsoleW
GetFileType
GetStartupInfoW
GetStringTypeW
GetModuleFileNameA
advapi32
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegQueryValueA
RegEnumKeyA
RegOpenKeyW
RegCreateKeyA
RegEnumValueW
user32
MsgWaitForMultipleObjects
PostQuitMessage
GetWindowRect
GetDesktopWindow
GetWindowTextW
BringWindowToTop
GetMessageW
DefWindowProcW
GetCursorPos
RegisterWindowMessageA
LoadIconW
SendMessageA
PeekMessageA
PeekMessageW
SendMessageW
RegisterClassExW
SetWindowPos
UpdateWindow
AppendMenuA
RegisterClassExA
TranslateMessage
DefWindowProcA
RegisterWindowMessageW
GetDlgItem
RedrawWindow
MessageBoxW
FindWindowW
SetFocus
TrackPopupMenu
SetForegroundWindow
LoadIconA
GetClientRect
DestroyWindow
Sections
.text Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2.5MB - Virtual size: 2.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 69KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ