Static task
static1
Behavioral task
behavioral1
Sample
9d9026832846b3fc4815a147197313921b44f04423de9fc2eaad261769513065.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
9d9026832846b3fc4815a147197313921b44f04423de9fc2eaad261769513065.exe
Resource
win10v2004-20221111-en
General
-
Target
9d9026832846b3fc4815a147197313921b44f04423de9fc2eaad261769513065
-
Size
211KB
-
MD5
0930aa609964fa3b4db982a6dee36168
-
SHA1
b88c2319b72ccc4bb6df18824d084beca875d082
-
SHA256
9d9026832846b3fc4815a147197313921b44f04423de9fc2eaad261769513065
-
SHA512
5773c894a3f06d833a7508ed15e0af6f02f5db10e9a26d05aadb51df765b8b0077196bb91797a953bc236f6ccacdfedadec14f261d0c8a229e4fc663626fb5b2
-
SSDEEP
6144:L0Utun90CMgVvcLGxOk/Xs5KpeNHYzZYBZIF:L0UGt0LGxxc5t1Y1YBCF
Malware Config
Signatures
Files
-
9d9026832846b3fc4815a147197313921b44f04423de9fc2eaad261769513065.exe windows x86
6f4acdfc103c6f065349b595331b6721
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
IsBadReadPtr
WideCharToMultiByte
LeaveCriticalSection
DeleteCriticalSection
GlobalMemoryStatus
IsBadCodePtr
lstrlenW
FreeLibrary
CreateEventW
SetEvent
SetFilePointer
GlobalLock
MulDiv
CreateSemaphoreW
EnterCriticalSection
GetTickCount
WaitForSingleObject
GetThreadPriority
CreateFileW
CloseHandle
GetProcessHeap
GetPrivateProfileStringW
GetCurrentThread
InterlockedIncrement
DeleteFileW
MultiByteToWideChar
ResetEvent
GetCurrentProcess
GetSystemInfo
LoadLibraryW
InterlockedDecrement
lstrcmpiW
VirtualFree
lstrcpynW
GetModuleFileNameA
GetVersionExW
SetThreadPriority
CreateThread
HeapAlloc
ReadFile
GetQueuedCompletionStatus
GetSystemTimeAsFileTime
SetEndOfFile
GetLastError
HeapFree
GlobalAlloc
GetTimeZoneInformation
GetFileSize
GetFileAttributesW
GetModuleHandleA
SetUnhandledExceptionFilter
GlobalHandle
GlobalFree
GetFullPathNameW
GetProfileIntA
GetEnvironmentStringsW
GetCurrentProcessId
lstrcpyA
WaitForMultipleObjects
InitializeCriticalSection
InterlockedExchange
WriteFile
lstrcpyW
ReleaseSemaphore
GetDiskFreeSpaceW
QueryPerformanceCounter
IsBadWritePtr
lstrlenA
lstrcmpW
GlobalUnlock
user32
EnableWindow
CreateDialogParamW
DispatchMessageW
ReleaseDC
MoveWindow
SetCursor
SetDlgItemInt
InvalidateRect
LoadCursorW
IsWindowVisible
CheckDlgButton
TranslateMessage
GetDlgItem
GetWindowRect
GetDlgItemInt
DestroyWindow
GetWindowLongW
GetDC
GetClientRect
IsRectEmpty
ClientToScreen
PeekMessageW
CheckRadioButton
SetDlgItemTextW
LoadStringW
DefWindowProcW
GetDesktopWindow
IsWindow
GetAsyncKeyState
SetWindowLongW
ShowWindow
SendMessageW
msoeacct
DllGetClassObject
DllCanUnloadNow
ValidEmailAddress
GetDllMajorVersion
HrCreateAccountManager
msls31
LssbGetVisibleDcpInSubline
LssbGetNumberDnodesInSubline
LssbGetObjDimSubline
LssbGetDurTrailWithPensInSubline
LssbGetPlsrunsFromSubline
LsCompressSubline
oleaut32
VarBstrFromR4
VarBstrFromDec
VarBstrFromCy
VarBstrFromDate
VarBstrFromUI2
VarBstrFromDisp
VarBstrFromI4
VarBstrFromR8
VarBstrFromI2
VarBstrFromI1
VarBstrFromUI1
VarBstrFromI8
VarBstrFromUI4
VarBstrFromUI8
nddeapi
NDdeGetErrorStringA
NDdeIsValidAppTopicListA
NDdeGetTrustedShareW
NDdeGetShareSecurityW
NDdeIsValidAppTopicListW
NDdeGetTrustedShareA
msnetobj
DllGetClassObject
DllRegisterServer
DllUnregisterServer
DllCanUnloadNow
cewmdm
DllRegisterServer
DllCanUnloadNow
DllGetClassObject
DllUnregisterServer
msltus40
DllUnregisterServer
DllRegisterServer
msoert2
AppendTempFileList
Sections
.text Size: 82KB - Virtual size: 81KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 118KB - Virtual size: 117KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 6.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ