Static task
static1
Behavioral task
behavioral1
Sample
9b42bc145f1c5b73ffbc2f836194e056dd2ce123e06690979e656d1f60a3f89c.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
9b42bc145f1c5b73ffbc2f836194e056dd2ce123e06690979e656d1f60a3f89c.exe
Resource
win10v2004-20221111-en
General
-
Target
9b42bc145f1c5b73ffbc2f836194e056dd2ce123e06690979e656d1f60a3f89c
-
Size
98KB
-
MD5
b300cf496ce59525d639c1ec61ca9b5e
-
SHA1
c9730b434ebb718dd4b354538bf8d8ad55e69e14
-
SHA256
9b42bc145f1c5b73ffbc2f836194e056dd2ce123e06690979e656d1f60a3f89c
-
SHA512
c3935d59473be19441b520c00989c7806f5af2c7c698b23e5a578cf73642f7423036c94320e02c8f43649c0341d4aae5fbeeb4aadd0cce50ab5ec5254eebc950
-
SSDEEP
1536:vswig1cloTDJbSCjdYkTinq3fkvl0voOFwE0iwe41IQ7xcNcnIAoO4:EPg993Tiq8t0voOSti7KtNIAd4
Malware Config
Signatures
Files
-
9b42bc145f1c5b73ffbc2f836194e056dd2ce123e06690979e656d1f60a3f89c.exe windows x86
94e7a9a4f7b2dc9462fcc76dde828401
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
PropertySheetW
ord15
PropertySheetA
ord5
CreateStatusWindowW
ord8
FlatSB_SetScrollProp
FlatSB_GetScrollProp
UninitializeFlatSB
FlatSB_SetScrollInfo
ord6
FlatSB_SetScrollPos
InitCommonControlsEx
FlatSB_EnableScrollBar
ord2
ord17
CreateToolbarEx
CreatePropertySheetPageA
shlwapi
StrChrIW
StrCmpNA
kernel32
HeapLock
GetOverlappedResult
GetModuleHandleA
GetProcAddress
GetCommandLineA
VirtualAllocEx
GetTickCount
LocalFree
GetCurrentProcessId
GetCurrentProcess
DeleteFileA
GetHandleInformation
OpenEventA
GetProcessHeap
CopyFileA
GetExitCodeThread
GetModuleFileNameA
QueryPerformanceCounter
LocalReAlloc
GetStartupInfoA
GetVersion
ExitProcess
EnterCriticalSection
LeaveCriticalSection
GetLastError
FlushFileBuffers
WriteFile
InitializeCriticalSection
DeleteCriticalSection
ReadFile
SetHandleCount
GetStdHandle
GetFileType
SetFilePointer
TerminateProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
HeapAlloc
InterlockedDecrement
InterlockedIncrement
MultiByteToWideChar
SetStdHandle
CloseHandle
CreateFileA
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
LoadLibraryA
GetStringTypeA
GetStringTypeW
SetEndOfFile
LCMapStringA
LCMapStringW
uxtheme
GetThemeSysColorBrush
comdlg32
ChooseColorW
FindTextA
ReplaceTextW
GetOpenFileNameA
GetFileTitleW
PageSetupDlgW
PrintDlgW
ChooseColorA
CommDlgExtendedError
ChooseFontA
ReplaceTextA
ChooseFontW
PageSetupDlgA
GetOpenFileNameW
PrintDlgA
Sections
.text Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 42KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ