Static task
static1
Behavioral task
behavioral1
Sample
9c9bf0a29e494ce37f0293cacc2d258865af75e5e00678b2a28f3b14618515b7.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
9c9bf0a29e494ce37f0293cacc2d258865af75e5e00678b2a28f3b14618515b7.exe
Resource
win10v2004-20221111-en
General
-
Target
9c9bf0a29e494ce37f0293cacc2d258865af75e5e00678b2a28f3b14618515b7
-
Size
104KB
-
MD5
14733be9305230c0568227892852a906
-
SHA1
1809684bd4db0adaca77c76558926503d7f5f891
-
SHA256
9c9bf0a29e494ce37f0293cacc2d258865af75e5e00678b2a28f3b14618515b7
-
SHA512
8575d019efd1ce40ec0d3ad51cf2eb60486918d8615b804169db5cc20443775d7774af02b4a4429ba357b57f3fc6f06d4a55d83e417ff1bbe918ab5ba7e9b36a
-
SSDEEP
3072:WiZH+eUETPLuzzaS2Mah2kf5JCjJz1LWqCg:W65UmLWaSC2kfmFWy
Malware Config
Signatures
Files
-
9c9bf0a29e494ce37f0293cacc2d258865af75e5e00678b2a28f3b14618515b7.exe windows x86
27896ae578c6e06fde17d74b37f51869
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comdlg32
ChooseColorA
msvcrt
printf
__set_app_type
exit
_exit
_acmdln
_strnicmp
free
_snprintf
calloc
fopen
__p__commode
strcmp
__getmainargs
_adjust_fdiv
atan
_XcptFilter
__p__fmode
_initterm
_except_handler3
_iob
fclose
__setusermatherr
__dllonexit
kernel32
GetConsoleMode
UnhandledExceptionFilter
CreateProcessA
GetStartupInfoA
CopyFileA
GetSystemTimeAsFileTime
user32
SetCursor
IsChild
ShowWindow
DeleteMenu
InsertMenuItemA
CallWindowProcA
GetDC
PtInRect
shell32
SHBrowseForFolderW
FindExecutableW
DoEnvironmentSubstW
SHGetPathFromIDListW
SHCreateDirectoryExA
SHGetSpecialFolderPathA
ExtractAssociatedIconW
oleaut32
SafeArrayCreate
SysReAllocStringLen
VariantCopy
CreateErrorInfo
SafeArrayGetUBound
SysFreeString
advapi32
RegEnumKeyW
AdjustTokenPrivileges
CheckTokenMembership
OpenThreadToken
LookupPrivilegeValueW
RegCloseKey
RegSetValueExA
ole32
CoFreeUnusedLibraries
OleUninitialize
ProgIDFromCLSID
RegisterDragDrop
gdi32
CreateCompatibleDC
StretchDIBits
RestoreDC
comctl32
ImageList_Destroy
ImageList_SetOverlayImage
ImageList_GetBkColor
CreateStatusWindowA
ImageList_AddMasked
ImageList_DragEnter
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 61KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ