Static task
static1
Behavioral task
behavioral1
Sample
9e76fea9a80b2ae5c8d6d71f42bbef6976ae3fc0c0a6b4dd43225e100a9fdbad.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
9e76fea9a80b2ae5c8d6d71f42bbef6976ae3fc0c0a6b4dd43225e100a9fdbad.exe
Resource
win10v2004-20220812-en
General
-
Target
9e76fea9a80b2ae5c8d6d71f42bbef6976ae3fc0c0a6b4dd43225e100a9fdbad
-
Size
526KB
-
MD5
b0b795898c6a8e8184ab518694b372e5
-
SHA1
db69712c974e09529b3e1d020bab161b356c1d4a
-
SHA256
9e76fea9a80b2ae5c8d6d71f42bbef6976ae3fc0c0a6b4dd43225e100a9fdbad
-
SHA512
dcdddd2e26076d141f5a4bda0f28a6a16288641720a90e518eff515045ef68157476104d6f416a6b4675eacb08fc170b2fcefb01938a8bbcbb47e3c8aca12995
-
SSDEEP
6144:7crgz4j8BSNXs/lCt8rBOqO/zjb82CEMKV5F1fyua8sR0sXNNfX6aK+JO5:DBSQCqTEjI2/MKVWisn6t+JW
Malware Config
Signatures
Files
-
9e76fea9a80b2ae5c8d6d71f42bbef6976ae3fc0c0a6b4dd43225e100a9fdbad.exe windows x86
3e7392a8abc623b513450adf20e30eb9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapAlloc
GetProcessHeap
GetStartupInfoW
ExitProcess
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlUnwind
RaiseException
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
HeapReAlloc
HeapSize
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
GetCurrentDirectoryW
HeapFree
VirtualFree
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
GetTimeZoneInformation
GetConsoleCP
GetConsoleMode
GetLocaleInfoA
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
SetEnvironmentVariableA
LocalFileTimeToFileTime
HeapCreate
GetVersionExW
FileTimeToLocalFileTime
FileTimeToSystemTime
SetErrorMode
GetModuleHandleA
GlobalFlags
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
LocalAlloc
FormatMessageW
LocalFree
MulDiv
GlobalGetAtomNameW
GetDiskFreeSpaceW
GetTempFileNameW
GetFileTime
SetFileTime
GetFileAttributesW
GlobalUnlock
GlobalFree
GetCurrentProcessId
InterlockedIncrement
GetCurrentThread
ConvertDefaultLocale
GetVersion
EnumResourceLanguagesW
lstrcmpA
GetLocaleInfoW
WideCharToMultiByte
CompareStringA
InterlockedExchange
GlobalLock
GlobalAlloc
GetModuleFileNameW
GetShortPathNameW
GetFullPathNameW
GetVolumeInformationW
FindFirstFileW
FindClose
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
ReadFile
lstrlenW
GetThreadLocale
GetStringTypeExW
MoveFileW
FreeResource
GetCurrentThreadId
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
FreeLibrary
CompareStringW
LoadLibraryA
SetLastError
lstrcmpW
GetModuleHandleW
GetVersionExA
WriteFile
lstrcmpiW
GetTickCount
ReadProcessMemory
InterlockedDecrement
FindResourceW
LoadResource
LockResource
SizeofResource
WinExec
GetPrivateProfileIntW
CreateMutexW
lstrlenA
WritePrivateProfileStringW
DeleteFileW
GetPrivateProfileStringW
MultiByteToWideChar
DeviceIoControl
CreateFileW
GetLastError
SystemTimeToFileTime
GetLocalTime
GetProcessTimes
Sleep
OpenProcess
LoadLibraryW
GetProcAddress
WaitForSingleObject
CreateThread
HeapDestroy
CloseHandle
user32
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
FillRect
SystemParametersInfoW
GetMenuItemInfoW
InflateRect
GetMenuStringW
InsertMenuW
WindowFromPoint
KillTimer
SetTimer
ClientToScreen
SetRect
UnionRect
IsRectEmpty
GetDC
ReleaseDC
IsZoomed
UnpackDDElParam
ReuseDDElParam
LoadMenuW
DestroyMenu
ReleaseCapture
LoadAcceleratorsW
InvalidateRect
InsertMenuItemW
CreatePopupMenu
SetRectEmpty
BringWindowToTop
SetMenu
TranslateAcceleratorW
ShowOwnedPopups
SetCursor
GetMessageW
TranslateMessage
GetCursorPos
ValidateRect
GetDesktopWindow
CreateDialogIndirectParamW
GetNextDlgTabItem
EndDialog
RegisterClipboardFormatW
PostQuitMessage
IsWindowEnabled
ShowWindow
SetWindowTextW
IsDialogMessageW
GetWindowDC
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
ModifyMenuW
GetMenuState
EnableMenuItem
CheckMenuItem
CharUpperW
RegisterWindowMessageW
LoadIconW
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
IsChild
GetCapture
SetWindowsHookExW
CallNextHookEx
GetClassLongW
GetClassNameW
SetPropW
EnableWindow
GetClientRect
UnregisterClassA
SendMessageW
GetPropW
RemovePropW
GetFocus
IsWindow
SetFocus
GetWindowTextLengthW
GetWindowTextW
GetForegroundWindow
GetLastActivePopup
SetActiveWindow
DispatchMessageW
BeginDeferWindowPos
EndDeferWindowPos
GetDlgItem
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageW
MapWindowPoints
TrackPopupMenu
BeginPaint
EndPaint
GetSysColorBrush
LoadCursorW
DeleteMenu
DestroyIcon
PostThreadMessageW
UnregisterClassW
GetKeyState
SetCapture
LockWindowUpdate
GetDCEx
SetParent
GetWindowThreadProcessId
GetWindow
GetSystemMetrics
GetWindowRect
GetWindowPlacement
IsIconic
SystemParametersInfoA
IntersectRect
OffsetRect
SetWindowPos
SetWindowLongW
GetWindowLongW
CallWindowProcW
DefWindowProcW
GetDlgCtrlID
PtInRect
CopyRect
DeferWindowPos
EqualRect
ScreenToClient
GetParent
AdjustWindowRectEx
GetSysColor
RegisterClassW
GetClassInfoW
GetClassInfoExW
CreateWindowExW
MessageBoxW
GetMenuItemCount
GetMenuItemID
GetSubMenu
PostMessageW
SetForegroundWindow
IsWindowVisible
UpdateWindow
GetMenu
GetActiveWindow
gdi32
CreatePatternBrush
GetStockObject
CreateSolidBrush
SetRectRgn
CombineRgn
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
Escape
TextOutW
RectVisible
PtVisible
GetPixel
CreateRectRgn
IntersectClipRect
ExcludeClipRect
SetMapMode
SetBkMode
RestoreDC
SaveDC
ExtTextOutW
BitBlt
CreateFontIndirectW
GetDeviceCaps
PatBlt
CreateRectRgnIndirect
GetBkColor
StretchDIBits
DeleteDC
CreateFontW
GetCharWidthW
DeleteObject
GetTextExtentPoint32W
GetTextMetricsW
SelectObject
CreateCompatibleDC
CreateCompatibleBitmap
CreateBitmap
GetObjectW
SetBkColor
SetTextColor
GetClipBox
SelectClipRgn
comdlg32
GetFileTitleW
winspool.drv
DocumentPropertiesW
ClosePrinter
OpenPrinterW
advapi32
RegOpenKeyA
RegSetValueW
GetFileSecurityW
SetFileSecurityW
RegCreateKeyW
RegQueryValueW
RegEnumKeyW
RegDeleteValueW
RegSetValueExW
RegCreateKeyExW
RegSetValueA
RegOpenKeyW
RegEnumValueA
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
RegDeleteKeyW
StartServiceW
OpenServiceW
CreateServiceW
OpenSCManagerW
CloseServiceHandle
RegQueryValueExA
shell32
SHGetFolderPathW
SHGetFolderPathA
SHGetFileInfoW
DragFinish
DragQueryFileW
ExtractIconW
ShellExecuteA
comctl32
InitCommonControlsEx
shlwapi
StrStrIW
PathStripToRootW
PathIsUNCW
PathFindExtensionW
StrStrIA
PathFindFileNameW
oledlg
OleUIBusyW
ole32
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
StringFromCLSID
CoTaskMemFree
CoRevokeClassObject
CoRegisterClassObject
CoUninitialize
OleRun
CoCreateInstance
CoInitialize
CoDisconnectObject
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter
StringFromGUID2
oleaut32
SysAllocString
SysStringByteLen
SysFreeString
VariantInit
VariantClear
SysAllocStringLen
VariantChangeType
SysStringLen
RegisterTypeLi
LoadTypeLi
LoadRegTypeLi
VariantCopy
GetErrorInfo
iphlpapi
GetAdaptersInfo
wininet
InternetReadFile
HttpQueryInfoW
InternetCloseHandle
InternetOpenUrlW
InternetOpenW
Sections
.text Size: 256KB - Virtual size: 253KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 48KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ