Static task
static1
Behavioral task
behavioral1
Sample
9037b83029f887a103a28abf16ffb00331ae9b2eacaf4cc850264b958e1e6855.exe
Resource
win7-20220901-en
General
-
Target
9037b83029f887a103a28abf16ffb00331ae9b2eacaf4cc850264b958e1e6855
-
Size
262KB
-
MD5
fdf865daf62b1d9cc6f3321ad2c67c4e
-
SHA1
2edf4f8a85bf54d99fed1b8e1a0e935475503db6
-
SHA256
9037b83029f887a103a28abf16ffb00331ae9b2eacaf4cc850264b958e1e6855
-
SHA512
63e68bbbe59fcb4534a3f49118e1fd913f8dbd55c63126e51cb00feb616f9d8fbab2b9ca81fe30ceef5dd71aedcbd4324b9b3c66266851a3d7ccfdc177170a6b
-
SSDEEP
3072:wqxZUWRR6hp10fbSxuwHqX1Rf0EA3GW0wx0CPg7lL7zZr7ZjU3y50xw4Pv:nn0b0zSQwHqX70V2CqCPg7lrhDUHn
Malware Config
Signatures
Files
-
9037b83029f887a103a28abf16ffb00331ae9b2eacaf4cc850264b958e1e6855.exe windows x86
ffc14399aad34bfce32cdc1718b6ea0b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetLastError
CreateIoCompletionPort
CreateFileW
FlushFileBuffers
WriteConsoleW
SetStdHandle
HeapReAlloc
LoadLibraryW
FormatMessageA
GetConsoleMode
GetConsoleCP
SetFilePointer
HeapSize
Sleep
GetStringTypeW
MultiByteToWideChar
LCMapStringW
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
DeleteCriticalSection
CreateFileA
GetFileSize
CreateFileMappingA
CloseHandle
MapViewOfFileEx
UnmapViewOfFile
GetModuleFileNameA
LocalFree
lstrcpynA
GetProcAddress
LoadLibraryExA
MoveFileExA
lstrcpyA
GetProcessHeap
HeapCreate
GlobalLock
GlobalUnlock
HeapAlloc
CreateEventA
GetCommState
SetCommState
EscapeCommFunction
GetDateFormatA
LoadLibraryA
GetFileType
InitializeCriticalSectionAndSpinCount
SetHandleCount
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetModuleFileNameW
GetStdHandle
WriteFile
ExitProcess
LeaveCriticalSection
EnterCriticalSection
GetCurrentProcess
TerminateProcess
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentThreadId
SetLastError
GetModuleHandleW
TlsFree
DecodePointer
RaiseException
RtlUnwind
GetCommandLineA
HeapSetInformation
GetStartupInfoW
HeapFree
IsProcessorFeaturePresent
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
user32
RemovePropA
IsDlgButtonChecked
GetPropA
MessageBoxA
EnumChildWindows
LoadStringA
BeginPaint
wsprintfA
EndPaint
DefWindowProcA
GetDlgItem
GetWindowTextLengthA
GetDlgItemTextA
SetWindowTextA
DestroyWindow
PostQuitMessage
CreateWindowExA
GetCursorPos
CreatePopupMenu
TrackPopupMenuEx
SendMessageA
GetDialogBaseUnits
GetWindowTextA
RegisterClipboardFormatA
IsWindowVisible
SetPropA
gdi32
CreateFontA
SaveDC
SelectObject
TextOutA
DeleteObject
RestoreDC
GetTextExtentPoint32A
CreateSolidBrush
FillRgn
GetDeviceCaps
comdlg32
ChooseColorA
advapi32
CryptGenKey
CryptEncrypt
OpenSCManagerA
OpenServiceA
ControlService
CloseServiceHandle
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RegCreateKeyExA
RegSetValueExA
CryptAcquireContextA
shell32
SHGetFolderPathA
ole32
OleGetClipboard
CoTaskMemFree
ReleaseStgMedium
winmm
timeBeginPeriod
timeSetEvent
shlwapi
PathFindFileNameA
StrChrA
PathFindExtensionA
StrDupA
StrToIntExA
wnsprintfA
StrRetToStrA
secur32
EnumerateSecurityPackagesA
setupapi
SetupDiGetClassDevsA
SetupDiEnumDeviceInterfaces
SetupDiDestroyDeviceInfoList
rasdlg
RasPhonebookDlgA
Sections
.text Size: 67KB - Virtual size: 67KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 120KB - Virtual size: 119KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.relo Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ