Static task
static1
Behavioral task
behavioral1
Sample
9f0d679c5554e8631fba97b3b1d389a655f21b1ed41a4d355de1d97ad701f17a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9f0d679c5554e8631fba97b3b1d389a655f21b1ed41a4d355de1d97ad701f17a.exe
Resource
win10v2004-20221111-en
General
-
Target
9f0d679c5554e8631fba97b3b1d389a655f21b1ed41a4d355de1d97ad701f17a
-
Size
392KB
-
MD5
aa402a75667341f4c5ef0bc49bd86709
-
SHA1
479e01cea23176b5a984fe75afc0810b162c12e3
-
SHA256
9f0d679c5554e8631fba97b3b1d389a655f21b1ed41a4d355de1d97ad701f17a
-
SHA512
8ca7e997025db759507364566631cd6cec2ad6e6b5d5c1656327b9e72c1167d8a07d577ad37e1ac7f4c22c66a0d5865b6ff8c0c649ba5c8d085873ec9a22f594
-
SSDEEP
12288:LRskdtDMgmQTsVxNaOmGcG0VkX0jLLmH0XEQu:LRskdt6QAVLaOmIImH0
Malware Config
Signatures
Files
-
9f0d679c5554e8631fba97b3b1d389a655f21b1ed41a4d355de1d97ad701f17a.exe windows x86
cf6493f8eda7a6c3572b6358d9c0df53
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateFileA
CloseHandle
GetSystemTime
Sleep
GetComputerNameA
lstrlenA
GetCommandLineW
GetTickCount
UnmapViewOfFile
LocalUnlock
LoadLibraryExA
GetCurrentDirectoryA
PulseEvent
CreateThread
SetEvent
SetLastError
CreateThread
GetModuleHandleA
LocalFree
HeapCreate
user32
IsWindow
GetKeyState
FillRect
GetDC
DrawMenuBar
CreateWindowExA
CallWindowProcA
DrawEdge
GetDlgItem
DispatchMessageA
CheckRadioButton
SetFocus
GetScrollBarInfo
clbcatq
ComPlusMigrate
SetSetupSave
SetupOpen
CheckMemoryGates
DowngradeAPL
inetcpl.cpl
OpenFontsDialog
Sections
.text Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 732KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ