Static task
static1
Behavioral task
behavioral1
Sample
9f539ba2416f9b2f377dc8a75a373aea30db4d241b2a3e1144a30ab0226143e6.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
9f539ba2416f9b2f377dc8a75a373aea30db4d241b2a3e1144a30ab0226143e6.exe
Resource
win10v2004-20220901-en
General
-
Target
9f539ba2416f9b2f377dc8a75a373aea30db4d241b2a3e1144a30ab0226143e6
-
Size
599KB
-
MD5
2b088d97fc2b107aeec5cf23e5e7a160
-
SHA1
96cd867e55a77e9310ce86087c8e7b879672e276
-
SHA256
9f539ba2416f9b2f377dc8a75a373aea30db4d241b2a3e1144a30ab0226143e6
-
SHA512
f5224c82ad2c5cde36e8b7b15f31c9d79ccfebc693958c446b7604fbc704de0b52968a3cec914eaad2e78689f3edf94c2f15f54de1bb72943c011ae4d5542906
-
SSDEEP
12288:KM5X31dBwbWXEhcO0lt6+SIJOSzq3BAuyos2gXAiuZKnq2GuRZ1zu:KM5X31d6bWXKYTONF3s24Ai7qsRH
Malware Config
Signatures
Files
-
9f539ba2416f9b2f377dc8a75a373aea30db4d241b2a3e1144a30ab0226143e6.exe windows x86
9a7b07332e26f58899f7bdf91612b295
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
ImageList_GetFlags
ImageList_Remove
ImageList_GetImageInfo
ImageList_Duplicate
InitCommonControlsEx
kernel32
GetCurrentThread
GetVolumeInformationA
GetFileTime
WriteConsoleInputW
VirtualQuery
InterlockedDecrement
GetCommandLineA
OpenFileMappingA
TlsGetValue
MultiByteToWideChar
TlsAlloc
GetTempPathW
GetOEMCP
GetMailslotInfo
DosDateTimeToFileTime
WriteConsoleA
SetHandleCount
CompareStringA
EnterCriticalSection
SetEnvironmentVariableA
GetLongPathNameA
GetTickCount
CloseHandle
CreateDirectoryExW
WriteConsoleOutputCharacterA
GlobalFree
FindNextChangeNotification
GetStartupInfoA
GetLocalTime
TlsSetValue
GetFileType
GetThreadContext
GlobalFindAtomW
OpenMutexW
GetTimeFormatW
QueryPerformanceCounter
WriteConsoleOutputAttribute
GetTimeZoneInformation
LeaveCriticalSection
InitializeCriticalSection
GetModuleHandleW
VirtualAlloc
GetProfileSectionA
SetLastError
GetSystemTimeAsFileTime
Sleep
GetACP
LCMapStringW
TlsFree
HeapReAlloc
RtlMoveMemory
InterlockedExchange
GetPrivateProfileStructW
GetVersion
GetModuleFileNameA
HeapDestroy
GetModuleHandleA
SetConsoleCP
TransmitCommChar
LoadLibraryA
InterlockedIncrement
HeapCreate
CompareStringW
GetEnvironmentStrings
DeleteCriticalSection
GlobalHandle
WideCharToMultiByte
UnhandledExceptionFilter
SetFilePointer
FreeEnvironmentStringsW
SetStdHandle
GetEnvironmentStringsW
FindFirstFileW
FindNextFileA
LocalReAlloc
WaitForMultipleObjects
HeapAlloc
GetProcAddress
FlushViewOfFile
GetStringTypeA
GetNumberFormatA
ReadFile
WriteProfileStringW
LoadResource
MapViewOfFileEx
VirtualFree
CreateToolhelp32Snapshot
OpenMutexA
FreeEnvironmentStringsA
SetPriorityClass
GetComputerNameW
GetStdHandle
GetLogicalDriveStringsA
TerminateProcess
ReadConsoleOutputW
WriteFile
GetCurrentProcessId
GetLastError
GetCurrentProcess
ExitProcess
GetCPInfo
GetSystemTime
GetCalendarInfoW
RtlUnwind
GetCurrentThreadId
GetStringTypeW
FlushFileBuffers
IsBadWritePtr
FindAtomA
CreateMutexA
GetTempFileNameW
HeapFree
ReleaseMutex
LocalHandle
LCMapStringA
AddAtomA
SetTimeZoneInformation
EnumResourceNamesA
GlobalFix
CreateNamedPipeA
DeleteFileA
ExpandEnvironmentStringsA
OpenSemaphoreA
user32
InsertMenuItemA
BeginPaint
EqualRect
CreateWindowStationA
CallWindowProcA
SetPropW
RegisterClassExA
LockWindowUpdate
CharPrevExA
InSendMessage
GetAsyncKeyState
SendMessageTimeoutA
SetCapture
DlgDirListComboBoxW
EnumPropsA
GetAltTabInfo
SendNotifyMessageA
PeekMessageW
ChangeDisplaySettingsA
CreatePopupMenu
SetMenuContextHelpId
GetKeyNameTextA
GetGUIThreadInfo
CallMsgFilterA
RegisterClassA
GetScrollRange
DdeKeepStringHandle
Sections
.text Size: 160KB - Virtual size: 160KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 304KB - Virtual size: 304KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 120KB - Virtual size: 141KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ