Static task
static1
Behavioral task
behavioral1
Sample
9cc0bbf7aa08c15ee49af1b3774784b7c0d2d3e8c09a3580202aacc46fdbf5f0.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9cc0bbf7aa08c15ee49af1b3774784b7c0d2d3e8c09a3580202aacc46fdbf5f0.exe
Resource
win10v2004-20221111-en
General
-
Target
9cc0bbf7aa08c15ee49af1b3774784b7c0d2d3e8c09a3580202aacc46fdbf5f0
-
Size
163KB
-
MD5
5ccdd1375a622305ba6a2f64171af422
-
SHA1
e8a37308239c67c5dcf193a9b3fb0fcc268f10ff
-
SHA256
9cc0bbf7aa08c15ee49af1b3774784b7c0d2d3e8c09a3580202aacc46fdbf5f0
-
SHA512
7fbe9d7bb4f9a3c3bc32a5807faa2a5727921faec14ae85185de68e62f36aa83b7799799d999ab0abe389e3a3a03e784276d8de04e219f625a840351f8277594
-
SSDEEP
1536:kvVhqhihzQkI+ExLJdNJ1QjZj2iHDnPFXzN9qMbzzJgk5QukJKy+34bYaXSkLBzw:kvDRZI+YkHpfFgk5XMKy+34b1SNHz
Malware Config
Signatures
Files
-
9cc0bbf7aa08c15ee49af1b3774784b7c0d2d3e8c09a3580202aacc46fdbf5f0.exe windows x86
0a7ebebaa8629b7e823c3f19686c7536
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetWindowModuleFileNameW
RemoveMenu
UnpackDDElParam
SetWindowPlacement
IsClipboardFormatAvailable
CallNextHookEx
GetClipCursor
ShowWindow
NotifyWinEvent
SetWindowLongA
PeekMessageA
MsgWaitForMultipleObjects
ExitWindowsEx
CallWindowProcA
CharPrevA
CreateWindowExA
GetMessageA
TranslateMessage
DispatchMessageA
CreateDialogParamA
SetWindowTextA
GetDlgItemTextA
SetDlgItemTextA
DestroyWindow
LoadIconA
RegisterClassA
DefWindowProcA
PostQuitMessage
LoadStringA
EndDialog
GetDlgItem
MessageBoxA
PostMessageA
SendMessageA
InvalidateRgn
DragDetect
shell32
ExtractIconExW
ExtractIconExA
DragQueryFileA
DoEnvironmentSubstW
FindExecutableA
ShellAboutA
ole32
CoSwitchCallContext
CoGetTreatAsClass
CoGetClassObject
OleCreateFromData
CoGetObject
CreateDataCache
CreateGenericComposite
OleRun
advapi32
AdjustTokenPrivileges
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
OpenProcessToken
LookupPrivilegeValueA
opengl32
glColor3ub
glTexCoord3sv
glTexCoord4iv
glVertex3f
glIndexi
glColor4sv
glDrawPixels
glIsList
comctl32
ord17
kernel32
HeapSize
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
FlushFileBuffers
GetConsoleMode
GetConsoleCP
HeapReAlloc
HeapAlloc
InitializeCriticalSectionAndSpinCount
IsValidCodePage
GetOEMCP
GetCPInfo
GetSystemTimeAsFileTime
GetCurrentProcessId
WriteConsoleA
QueryPerformanceCounter
HeapCreate
InterlockedDecrement
GetCurrentThreadId
InterlockedIncrement
TlsFree
TlsAlloc
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetModuleHandleW
IsDebuggerPresent
SetUnhandledExceptionFilter
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
UnhandledExceptionFilter
TerminateProcess
GetStartupInfoA
VirtualQuery
VirtualProtect
Sleep
SizeofResource
SetLastError
SetErrorMode
GetTickCount
MultiByteToWideChar
VirtualAlloc
CloseHandle
CreateThread
HeapFree
LocalUnlock
BackupRead
FindFirstFileW
HeapValidate
GetVersionExW
GetProcessHeap
GetTempFileNameA
CreateFileA
ExitProcess
GetFileType
GetSystemTime
GetFileSize
GetStdHandle
RaiseException
ReadFile
RtlUnwind
SetEndOfFile
SetFilePointer
WriteFile
GetCommandLineA
GetLastError
GetModuleHandleA
TlsGetValue
TlsSetValue
WideCharToMultiByte
LocalAlloc
LocalFree
VirtualFree
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
CreateDirectoryA
CreateProcessA
DeleteFileA
FindResourceA
FormatMessageA
GetACP
GetCurrentProcess
GetEnvironmentVariableA
GetExitCodeProcess
GetFileAttributesA
GetFullPathNameA
GetLocaleInfoA
GetModuleFileNameA
GetProcAddress
GetSystemDefaultLCID
GetSystemInfo
GetUserDefaultLangID
GetVersionExA
GetWindowsDirectoryA
IsDBCSLeadByte
LoadLibraryA
LoadResource
LockResource
RemoveDirectoryA
Sections
.text Size: 69KB - Virtual size: 69KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 31KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ