Static task
static1
Behavioral task
behavioral1
Sample
9a25c3c72f9bf95fc6b286cc7f5a4d05e20b0e7b08aca62baa9027ffcd62015f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9a25c3c72f9bf95fc6b286cc7f5a4d05e20b0e7b08aca62baa9027ffcd62015f.exe
Resource
win10v2004-20220812-en
General
-
Target
9a25c3c72f9bf95fc6b286cc7f5a4d05e20b0e7b08aca62baa9027ffcd62015f
-
Size
241KB
-
MD5
089c53bb0f24fe3d4740e62d4bbc59ee
-
SHA1
6c6b397fcf29a7f4f068d61abfd2cb423412c6f4
-
SHA256
9a25c3c72f9bf95fc6b286cc7f5a4d05e20b0e7b08aca62baa9027ffcd62015f
-
SHA512
f502332ac131f7fa9faf783995017abec9cf76f8da8e79ff5690255a286b0d2f5664ed0b42129e1e5976c3df7b6b14f88d2ed51f3b753ef383d75a2f4cf90268
-
SSDEEP
3072:X7PBbB4HfmhZOGjzmTfwQaIvDL3UZ50beEPDELg:X75BgfmhQ+SnL3k5WDE
Malware Config
Signatures
Files
-
9a25c3c72f9bf95fc6b286cc7f5a4d05e20b0e7b08aca62baa9027ffcd62015f.exe windows x86
9058607b4021ef3ec141cd81a8ba5f19
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalAddAtomA
GlobalFlags
GetThreadTimes
WriteConsoleInputW
FindNextFileW
Thread32Next
ReadConsoleA
Process32First
AddAtomW
Heap32ListFirst
GetBinaryTypeA
WritePrivateProfileSectionW
GetCommMask
ExpandEnvironmentStringsA
SetLocaleInfoW
EscapeCommFunction
EnumTimeFormatsW
CallNamedPipeW
SetConsoleActiveScreenBuffer
GetCommTimeouts
FindCloseChangeNotification
GetBinaryTypeA
SetThreadExecutionState
GetPrivateProfileSectionA
SetNamedPipeHandleState
GetTimeFormatW
GlobalGetAtomNameA
CreateConsoleScreenBuffer
GetProcessAffinityMask
GetProcessShutdownParameters
LocalFlags
SetHandleInformation
Process32First
LocalShrink
CreateHardLinkW
IsBadWritePtr
WritePrivateProfileSectionA
ClearCommBreak
CreatePipe
user32
GetWindowRgn
CreateDialogParamA
RegisterClassExW
PostThreadMessageA
SetWindowsHookW
EnumDisplaySettingsExW
CharPrevW
SetWindowTextA
CallNextHookEx
FindWindowExW
TranslateAcceleratorA
FindWindowA
UpdateWindow
IsZoomed
FindWindowExA
SetProcessWindowStation
WINNLSEnableIME
CreateWindowExA
WINNLSGetEnableStatus
DdeCmpStringHandles
UnhookWindowsHookEx
GetTitleBarInfo
MonitorFromPoint
Sections
.text Size: 223KB - Virtual size: 228KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.alt Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.alt Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.alt Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.alt Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.alt Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 512B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 512B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE