Static task
static1
Behavioral task
behavioral1
Sample
9ecace225085b53e47d0af86134e3f9d207611016b781f05c46b94b750c6d130.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
9ecace225085b53e47d0af86134e3f9d207611016b781f05c46b94b750c6d130.exe
Resource
win10v2004-20220901-en
General
-
Target
9ecace225085b53e47d0af86134e3f9d207611016b781f05c46b94b750c6d130
-
Size
40KB
-
MD5
e39c28c0d1f6565e031b687115e251c0
-
SHA1
492ead77922ac6dd95396432a12b2547d7d4ab91
-
SHA256
9ecace225085b53e47d0af86134e3f9d207611016b781f05c46b94b750c6d130
-
SHA512
68a666a703af8ffa1c3dc8e27e506e9ef2450696060fbd5ddddb69b09ec75d27b7e8afcabd26d78ff8cff808bb1be9a066b6efe2272440387fb3d505d7e221b3
-
SSDEEP
768:WOzsYEyHKZarPNeoBYD9ZAmIPTw291X6UsN/KWonfb/nf72kZdiAIty9U:WOzGy9PNeoBComIPT391K3ifb/nDdAaU
Malware Config
Signatures
Files
-
9ecace225085b53e47d0af86134e3f9d207611016b781f05c46b94b750c6d130.exe windows x86
7a25f185dda8dd567625e468d6f4a6c8
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetSystemTime
EnterCriticalSection
TlsGetValue
WideCharToMultiByte
GetCurrentProcess
LocalFileTimeToFileTime
GetCurrentProcessId
SetFileAttributesA
HeapCreate
SetUnhandledExceptionFilter
CreateFileW
DeleteAtom
FindClose
GetFileAttributesA
GetFileAttributesW
QueryPerformanceCounter
CreateFileA
SetLastError
IsProcessorFeaturePresent
TlsFree
GetProcessHeap
CloseHandle
AddAtomA
GetModuleHandleW
TerminateProcess
EncodePointer
WriteFile
FindNextFileA
InitializeCriticalSectionAndSpinCount
GetCurrentDirectoryA
GetTickCount
ExitProcess
GetProcAddress
TlsAlloc
CreateThread
LeaveCriticalSection
GetDriveTypeW
FreeEnvironmentStringsW
IsValidCodePage
FindAtomA
GetStartupInfoW
LoadLibraryW
GetStdHandle
InterlockedIncrement
Sleep
DeleteCriticalSection
MultiByteToWideChar
GetCommandLineA
ReleaseMutex
GetVolumeInformationW
InitializeCriticalSection
ExitThread
UnhandledExceptionFilter
HeapSize
GetModuleFileNameW
VirtualFree
HeapFree
GetACP
GetModuleFileNameA
VirtualAlloc
GetVersion
GetCPInfo
GetCurrentThread
CreatePipe
InterlockedDecrement
RtlUnwind
DecodePointer
TlsSetValue
GetDiskFreeSpaceExW
HeapReAlloc
HeapSetInformation
FindFirstFileA
GetEnvironmentStringsW
GetSystemTimeAsFileTime
GetStringTypeA
GetStringTypeW
ConvertDefaultLocale
SetFileTime
GetModuleHandleA
CreateMutexA
CreateActCtxW
GetTimeZoneInformation
IsDebuggerPresent
GetFileType
ReadFile
GetOEMCP
DeleteFileA
GetCurrentThreadId
LCMapStringW
VirtualProtect
FileTimeToSystemTime
GetLastError
SetHandleCount
HeapAlloc
user32
GetMenuItemCount
EnableMenuItem
GetMonitorInfoW
BeginDeferWindowPos
ReleaseCapture
LoadCursorW
MapDialogRect
UnhookWindowsHookEx
IsWindowEnabled
CreateDialogIndirectParamW
GetFocus
IsWindowVisible
GetClassInfoExW
ShowWindow
RegisterClipboardFormatW
SetCursor
CopyAcceleratorTableW
GetWindow
SetRect
GetCapture
GetDlgCtrlID
UnregisterClassW
RegisterWindowMessageW
CreateWindowExW
GetDC
ScreenToClient
GetMenu
gdiplus
GdipAlloc
GdipDeleteGraphics
GdipDisposeImage
GdipGetImageWidth
GdipGetImageHeight
GdipGetImagePixelFormat
GdipGetImagePaletteSize
GdipGetImagePalette
GdipCreateBitmapFromStream
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipBitmapUnlockBits
GdiplusStartup
GdiplusShutdown
GdipGetImageGraphicsContext
GdipDrawImageI
GdipCloneImage
GdipFree
Sections
.text Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ