Static task
static1
Behavioral task
behavioral1
Sample
a9cb06cf57a31a03c10276fb2cf9f127d922b7eb65a7a90dd01733fd9a092abd.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a9cb06cf57a31a03c10276fb2cf9f127d922b7eb65a7a90dd01733fd9a092abd.exe
Resource
win10v2004-20221111-en
General
-
Target
a9cb06cf57a31a03c10276fb2cf9f127d922b7eb65a7a90dd01733fd9a092abd
-
Size
210KB
-
MD5
35bb6fc47766a3d4b928fd1c2ffaa2fc
-
SHA1
86b0022f528a423af3d8af058f76f9f0b8664b7d
-
SHA256
a9cb06cf57a31a03c10276fb2cf9f127d922b7eb65a7a90dd01733fd9a092abd
-
SHA512
8494bdafa4bbc3e774995d8ee5668dcf5616ff4b6082a90e5b74ed0e61693d45ffe594419b6eeb4a042accd5631ecd9044d34b2c3248e7528a31d13243c0e458
-
SSDEEP
6144:iylwqQKvx4E4b7Y//KajT13Z0xEoz1ypYac5I:KTK54f+/KavxZozIpYa6I
Malware Config
Signatures
Files
-
a9cb06cf57a31a03c10276fb2cf9f127d922b7eb65a7a90dd01733fd9a092abd.exe windows x86
d2ed31a718240e2723e9491218bac5f9
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
MulDiv
GetFileSize
GetACP
GetSystemTimeAsFileTime
lstrcpynW
SetEndOfFile
InterlockedIncrement
GlobalFree
SetThreadPriority
lstrcpyA
CreateThread
GetThreadPriority
CloseHandle
HeapFree
lstrcmpW
InterlockedDecrement
GlobalFindAtomW
GetProfileIntA
GetCurrentProcessId
CreateSemaphoreW
GetDiskFreeSpaceW
ReadFile
GetCurrentThread
GlobalUnlock
HeapAlloc
EnterCriticalSection
GetLastError
lstrlenW
LoadLibraryW
GetProcessHeap
lstrcmpiW
GetFileAttributesW
WaitForMultipleObjects
InitializeCriticalSection
InterlockedExchange
LeaveCriticalSection
lstrcpyW
SetLastError
GetPrivateProfileStringW
CreateFileW
IsBadReadPtr
IsBadWritePtr
SetEvent
WriteFile
MultiByteToWideChar
WaitForSingleObject
GetFullPathNameW
ResetEvent
SetFilePointer
GetModuleFileNameA
GetCurrentProcess
IsBadCodePtr
lstrlenA
GlobalLock
GetProcAddress
ReleaseSemaphore
GlobalMemoryStatus
GlobalHandle
CreateEventW
VirtualFree
FreeLibrary
WideCharToMultiByte
GetTickCount
GetVersionExW
GetQueuedCompletionStatus
DeleteCriticalSection
SetUnhandledExceptionFilter
GlobalAlloc
QueryPerformanceCounter
oleaut32
VarBstrFromUI1
VarBstrFromDate
VarBstrFromDisp
VarBstrFromDec
VarBstrFromUI8
VarBstrFromR4
VarBstrFromI1
VarBstrFromCy
VarBstrFromUI4
VarBstrFromI2
VarBstrFromI4
VarBstrFromR8
VarBstrFromUI2
VarBstrFromI8
user32
SetCursor
IsWindowVisible
IsRectEmpty
GetClientRect
CheckDlgButton
GetDlgItemInt
SetDlgItemTextW
InvalidateRect
SetDlgItemInt
MoveWindow
DestroyWindow
CheckRadioButton
CreateDialogParamW
GetDlgItem
GetWindowRect
DefWindowProcW
LoadStringW
LoadCursorW
PeekMessageW
DispatchMessageW
IsWindow
ShowWindow
GetWindowLongW
SetWindowLongW
ClientToScreen
GetAsyncKeyState
GetDesktopWindow
TranslateMessage
ReleaseDC
GetDC
EnableWindow
SendMessageW
cewmdm
DllGetClassObject
DllCanUnloadNow
DllRegisterServer
DllUnregisterServer
msls31
LssbGetObjDimSubline
LsCompressSubline
LssbGetDurTrailWithPensInSubline
LssbGetPlsrunsFromSubline
LssbGetNumberDnodesInSubline
LssbGetVisibleDcpInSubline
nddeapi
NDdeIsValidAppTopicListA
NDdeGetShareSecurityW
NDdeGetTrustedShareW
NDdeIsValidAppTopicListW
NDdeGetErrorStringA
NDdeGetTrustedShareA
msltus40
DllRegisterServer
DllUnregisterServer
msoeacct
HrCreateAccountManager
DllGetClassObject
ValidEmailAddress
GetDllMajorVersion
DllCanUnloadNow
msnetobj
DllCanUnloadNow
DllRegisterServer
DllUnregisterServer
DllGetClassObject
Sections
.text Size: 81KB - Virtual size: 81KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 118KB - Virtual size: 117KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 6.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ