Static task
static1
Behavioral task
behavioral1
Sample
9eb091b0b8d2ed7e424788bcb1ee639db7f72b2d7f607796a697d761f78d3a2b.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
9eb091b0b8d2ed7e424788bcb1ee639db7f72b2d7f607796a697d761f78d3a2b.exe
Resource
win10v2004-20221111-en
General
-
Target
9eb091b0b8d2ed7e424788bcb1ee639db7f72b2d7f607796a697d761f78d3a2b
-
Size
288KB
-
MD5
d949b5dbbb949b76474c7678d42ddac4
-
SHA1
51ec028408b3abd4996f84fe68b0cbdb91d56719
-
SHA256
9eb091b0b8d2ed7e424788bcb1ee639db7f72b2d7f607796a697d761f78d3a2b
-
SHA512
8ebae50eada87969ff08efaa72a0c525fa5795ceb783dd9869be2dc5513251740c61ce21812783f7dc2eb52120fd7371653326cc693ed2c64bb3ecd1d3455f92
-
SSDEEP
3072:Tuyfvr1/itc+j2UmvNyLwRK+7jEA00J3yMNufSljwrFOEyrie8no/9+doxMMTFdO:Dvr1/iyYmvNyY7jVPJ3xw5OE3DdNX
Malware Config
Signatures
Files
-
9eb091b0b8d2ed7e424788bcb1ee639db7f72b2d7f607796a697d761f78d3a2b.exe windows x86
d56b83f881c6262176dc6fd3c34245a5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ispdll
ord4
ord6
ord7
ord9
ord1
ord5
ord2
kernel32
GetACP
GetTimeZoneInformation
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
HeapCreate
VirtualFree
SetUnhandledExceptionFilter
LCMapStringA
LCMapStringW
VirtualAlloc
IsBadWritePtr
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
CompareStringA
CompareStringW
HeapSize
HeapDestroy
DeleteCriticalSection
lstrcmpiA
HeapReAlloc
TerminateProcess
GetProfileStringA
GetCommandLineA
GetCurrentThreadId
InitializeCriticalSection
lstrlenW
MultiByteToWideChar
lstrlenA
GetShortPathNameA
GetModuleHandleA
GetModuleFileNameA
FreeLibrary
GetProcAddress
LoadLibraryA
lstrcpyA
lstrcatA
WideCharToMultiByte
LoadResource
FindResourceA
LockResource
GlobalFree
GlobalUnlock
GlobalLock
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
GetVersion
InterlockedIncrement
InterlockedDecrement
LocalFree
FormatMessageA
GetCurrentThread
lstrcmpA
GlobalAlloc
CloseHandle
HeapFree
HeapAlloc
RaiseException
ExitProcess
GetStartupInfoA
RtlUnwind
GetFileTime
GetFileSize
GetFileAttributesA
GetTickCount
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
CreateFileA
GetCurrentProcess
DuplicateHandle
SetErrorMode
WritePrivateProfileStringA
FileTimeToLocalFileTime
FileTimeToSystemTime
GetOEMCP
GetCPInfo
GetProcessVersion
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
TlsFree
GlobalHandle
TlsAlloc
LocalAlloc
SizeofResource
GetLastError
GlobalFlags
SetLastError
MulDiv
lstrcpynA
GetThreadLocale
SetEnvironmentVariableA
user32
InvalidateRect
CharUpperA
RegisterClipboardFormatA
PostThreadMessageA
GetNextDlgGroupItem
SetRect
CopyAcceleratorTableA
GetSysColorBrush
LoadCursorA
GetDesktopWindow
PtInRect
GetClassNameA
GrayStringA
DrawTextA
TabbedTextOutA
EndPaint
BeginPaint
ClientToScreen
InflateRect
DestroyMenu
LoadStringA
MapDialogRect
SetWindowContextHelpId
GetDC
ReleaseDC
GetMessageA
TranslateMessage
ValidateRect
GetCursorPos
SetCursor
PostQuitMessage
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
MoveWindow
SetWindowTextA
IsDialogMessageA
PostMessageA
UpdateWindow
SendDlgItemMessageA
MapWindowPoints
GetSysColor
PeekMessageA
DispatchMessageA
GetFocus
SetFocus
AdjustWindowRectEx
ScreenToClient
CopyRect
IsWindowVisible
EnableWindow
CharNextA
LoadIconA
GetWindowRect
SendMessageA
AppendMenuA
GetSystemMenu
UnregisterClassA
GetTopWindow
MessageBoxA
IsChild
GetCapture
WinHelpA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
ShowWindow
GetMenuItemID
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
GetKeyState
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
HideCaret
ShowCaret
ExcludeUpdateRgn
DrawFocusRect
DefDlgProcA
IsWindowUnicode
wsprintfA
GetWindowDC
GetClientRect
SetParent
FindWindowA
IsWindowEnabled
GetDlgItem
GetWindowLongA
GetParent
DestroyWindow
CreateDialogIndirectParamA
GetSystemMetrics
IsWindow
SetActiveWindow
GetActiveWindow
EndDialog
GetNextDlgTabItem
GetWindowPlacement
IsIconic
SystemParametersInfoA
IntersectRect
OffsetRect
RegisterWindowMessageA
SetWindowPos
SetWindowLongA
GetWindow
SetForegroundWindow
GetForegroundWindow
GetLastActivePopup
GetMessagePos
GetMessageTime
MessageBeep
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
DefWindowProcA
gdi32
ExtTextOutA
DPtoLP
DeleteDC
SaveDC
RestoreDC
SelectObject
SetBkMode
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
IntersectClipRect
GetViewportExtEx
GetWindowExtEx
CreateSolidBrush
PtVisible
RectVisible
TextOutA
Escape
LPtoDP
DeleteObject
GetMapMode
GetStockObject
GetDeviceCaps
PatBlt
CreateBitmap
GetObjectA
SetBkColor
SetTextColor
GetClipBox
GetBkColor
GetTextExtentPointA
BitBlt
CreateCompatibleDC
GetTextColor
CreateDIBitmap
comdlg32
GetOpenFileNameA
GetSaveFileNameA
GetFileTitleA
winspool.drv
ClosePrinter
DocumentPropertiesA
OpenPrinterA
advapi32
RegCreateKeyExA
RegOpenKeyExA
RegSetValueExA
RegCloseKey
comctl32
ord17
oledlg
ord8
ole32
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
OleInitialize
CoTaskMemAlloc
CoTaskMemFree
CLSIDFromString
CLSIDFromProgID
CoCreateInstance
CoInitialize
CoRegisterClassObject
CoRevokeClassObject
CoUninitialize
OleUninitialize
CoFreeUnusedLibraries
CoRegisterMessageFilter
OleFlushClipboard
OleIsCurrentClipboard
olepro32
ord253
oleaut32
SysAllocString
LoadTypeLi
RegisterTypeLi
VariantClear
VariantChangeType
SysAllocStringLen
SysStringLen
SysAllocStringByteLen
VariantCopy
VariantTimeToSystemTime
SysFreeString
Sections
.text Size: 184KB - Virtual size: 181KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 44KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ