Static task
static1
Behavioral task
behavioral1
Sample
9e57b510bf03b7403f2699aeaf36f1f1e2965e0e08170908378ca7baecd476d4.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
9e57b510bf03b7403f2699aeaf36f1f1e2965e0e08170908378ca7baecd476d4.exe
Resource
win10v2004-20221111-en
General
-
Target
9e57b510bf03b7403f2699aeaf36f1f1e2965e0e08170908378ca7baecd476d4
-
Size
56KB
-
MD5
5f14d2fa5a74642d6f24446076dacc86
-
SHA1
3b0e4954c748d40f2b198e0189253d0b2fb68eca
-
SHA256
9e57b510bf03b7403f2699aeaf36f1f1e2965e0e08170908378ca7baecd476d4
-
SHA512
cd27700e856a520d733905d087d500fb530b220e1f62377f4ad1aedb9c7c7f9ab8e81a6e96b3dca6125fefeb1b751420158f83da2eb1e14521cb8a58b6d0147b
-
SSDEEP
768:YapMmKRufbrXX9vtc9wdzNVEKtj06ojVOujqFL8eKC7NGBrV1OIWrY:X2qbX5ywl9qEhFA97NV1n
Malware Config
Signatures
Files
-
9e57b510bf03b7403f2699aeaf36f1f1e2965e0e08170908378ca7baecd476d4.exe windows x86
b18ed68b7b39ab46b82b492f4df69a2d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
cryptdll
MD5Update
MD5Final
CDBuildVect
CDLocateRng
dsprop
CrackName
ErrMsgParam
CheckADsError
FindSheet
esent
JetBeginTransaction
JetCommitTransaction
JetCloseDatabase
user32
LoadCursorW
PostMessageW
DrawIcon
CharToOemA
IsWindowVisible
DrawTextA
PeekMessageW
LoadStringA
DefDlgProcA
LoadImageA
MessageBoxW
GetKeyNameTextA
LoadBitmapA
kernel32
TlsGetValue
GetLocalTime
GetStartupInfoA
GetProcAddress
GetDriveTypeW
GetTickCount
FormatMessageA
lstrcpynW
FindFirstFileW
GetModuleHandleA
GetLocaleInfoW
GetLastError
WaitForSingleObject
CreateEventA
HeapAlloc
GetFileSize
OpenMutexW
SetEnvironmentVariableA
GetLogicalDriveStringsA
CreateSemaphoreW
lstrcmpA
DeviceIoControl
CreateMutexA
Sections
.text Size: 20KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ