Static task
static1
Behavioral task
behavioral1
Sample
9958652b920bcbe43930f13a683af24e23d95d536c577f76c0476bd484bed090.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
9958652b920bcbe43930f13a683af24e23d95d536c577f76c0476bd484bed090.exe
Resource
win10v2004-20221111-en
General
-
Target
9958652b920bcbe43930f13a683af24e23d95d536c577f76c0476bd484bed090
-
Size
668KB
-
MD5
196d9feed0c303e1d256d3af1ec6d08a
-
SHA1
926c7145a4e199fa33cc6729ccf6ccb600032ccc
-
SHA256
9958652b920bcbe43930f13a683af24e23d95d536c577f76c0476bd484bed090
-
SHA512
accb15272126c13ae8129f22f30704a7563c9c6881bb45dd1a21346fc66a5f865436e2095802eebb62f7422e6ee637d7a0165ce5b120bb769b39a76a409c1206
-
SSDEEP
12288:O1GMGgaX6BR1mGgUIVyQg9cMjMt6uI7D6Z5uygsCI07imz1E:aGMG7Xi1mJ0Qg9WMHs0Rsr0Wmz1
Malware Config
Signatures
Files
-
9958652b920bcbe43930f13a683af24e23d95d536c577f76c0476bd484bed090.exe windows x86
cdbe794c268b6c0236524b0270930e8a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateToolhelp32Snapshot
GetOEMCP
CreateEventA
GetEnvironmentStrings
FreeEnvironmentStringsA
GetSystemTimeAdjustment
GetFileType
SetStdHandle
EnterCriticalSection
TerminateProcess
SetLocalTime
IsValidLocale
GetCurrentThreadId
GetPrivateProfileSectionNamesA
SetFilePointer
VirtualAlloc
EnumSystemLocalesA
CloseHandle
GetCurrentProcessId
EnumCalendarInfoW
GetCommandLineA
LCMapStringW
GetTimeFormatA
VirtualFree
GetThreadPriorityBoost
HeapReAlloc
OpenMutexA
GetCurrentProcess
GetVersionExA
ReadConsoleOutputW
FlushFileBuffers
TlsAlloc
WriteConsoleOutputCharacterW
HeapDestroy
ReadConsoleW
LoadLibraryExA
GetModuleFileNameA
ExitProcess
GetStartupInfoW
InterlockedExchangeAdd
GetLongPathNameW
GetThreadPriority
GetDateFormatA
GetTempFileNameA
VirtualQuery
TlsGetValue
UnhandledExceptionFilter
MultiByteToWideChar
GetSystemTimeAsFileTime
VirtualProtect
GetCurrentThread
CreateMutexA
WideCharToMultiByte
GetVolumeInformationW
GetACP
RtlUnwind
GetFileTime
CreatePipe
GetProcAddress
LoadLibraryA
GetModuleHandleA
ExitThread
GetModuleFileNameW
GetStringTypeW
SetEnvironmentVariableA
FreeEnvironmentStringsW
FindFirstFileExA
EnumResourceLanguagesW
GetLocaleInfoA
GetTickCount
HeapAlloc
GetStartupInfoA
VirtualFreeEx
EnumResourceNamesW
GlobalDeleteAtom
ReadConsoleA
WritePrivateProfileStringA
QueryPerformanceCounter
GetStringTypeA
CompareStringW
HeapLock
IsValidCodePage
GetEnvironmentStringsW
InterlockedExchange
GetStdHandle
GetLocaleInfoW
TryEnterCriticalSection
SetHandleCount
HeapSize
CreateNamedPipeW
GetCommandLineW
LocalReAlloc
HeapFree
CompareStringA
GetThreadLocale
ReadConsoleOutputCharacterA
GetLastError
GetTimeZoneInformation
SetThreadContext
SetLastError
InitializeCriticalSection
HeapCreate
LeaveCriticalSection
LCMapStringA
DeleteCriticalSection
GetLogicalDriveStringsA
TlsSetValue
TlsFree
GetSystemInfo
WriteFile
GlobalHandle
IsBadWritePtr
OpenEventA
WaitForSingleObjectEx
GetThreadSelectorEntry
ReadFile
GetUserDefaultLCID
GetCPInfo
user32
OemToCharBuffA
GetDlgItemTextW
CharUpperBuffW
GetSystemMetrics
VkKeyScanW
DdeAddData
GetAltTabInfo
GetWindowPlacement
GetLastActivePopup
DdeCreateDataHandle
LoadIconW
GetUserObjectInformationW
GetWindowTextLengthA
SendMessageA
GetClipboardFormatNameW
GetWindowInfo
SetCapture
SendNotifyMessageA
RegisterClassA
LoadKeyboardLayoutW
TranslateAcceleratorA
SetShellWindow
CopyIcon
ToAsciiEx
SwitchDesktop
RegisterClassExA
TranslateAccelerator
SendIMEMessageExW
CharUpperBuffA
comctl32
DestroyPropertySheetPage
CreateStatusWindowW
ImageList_SetFlags
ImageList_LoadImageW
ImageList_GetDragImage
ImageList_Draw
ImageList_EndDrag
ImageList_Write
ImageList_GetImageInfo
ImageList_Destroy
MakeDragList
ImageList_Create
ImageList_Remove
ImageList_Read
CreateMappedBitmap
ImageList_GetIconSize
ImageList_Merge
ImageList_GetIcon
ImageList_DrawEx
ImageList_DragEnter
_TrackMouseEvent
ImageList_SetBkColor
ImageList_SetIconSize
InitCommonControlsEx
CreateToolbarEx
InitMUILanguage
wininet
FindNextUrlCacheContainerW
UnlockUrlCacheEntryStream
Sections
.text Size: 212KB - Virtual size: 211KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 256KB - Virtual size: 253KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 112KB - Virtual size: 126KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 84KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ