Static task
static1
Behavioral task
behavioral1
Sample
9e9ada13fae482683db770748a6f885ec4d0a7de78f67854424023f096421f4e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9e9ada13fae482683db770748a6f885ec4d0a7de78f67854424023f096421f4e.exe
Resource
win10v2004-20220812-en
General
-
Target
9e9ada13fae482683db770748a6f885ec4d0a7de78f67854424023f096421f4e
-
Size
64KB
-
MD5
d11cb15b14b383893ba91dfbbe9ed5ab
-
SHA1
e0129c4010469b9cd7eff76ec84b0f8be45d282b
-
SHA256
9e9ada13fae482683db770748a6f885ec4d0a7de78f67854424023f096421f4e
-
SHA512
2b83228c41534d4e4a8555a516a2d077bcd9df96eac6c02b2c7b0a121c8e571c7736157fae4b01592787422fd994e9d85f5600932f6c6b5bf0665e71bc5395a9
-
SSDEEP
1536:qrzZdRlRp7+JWgPLn9vJC1GZPNdRRqLBqwl5:uzHRp7MWO9EMZN7ENBl5
Malware Config
Signatures
Files
-
9e9ada13fae482683db770748a6f885ec4d0a7de78f67854424023f096421f4e.exe windows x86
cfc8f634a2bbcb6043bf309db5ebf30b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualProtect
HeapAlloc
GetModuleHandleW
LocalFree
LocalAlloc
UnhandledExceptionFilter
GetCurrentThreadId
CreateEventW
HeapDestroy
LoadLibraryW
LeaveCriticalSection
GetCurrentThreadId
CloseHandle
InterlockedExchange
LoadLibraryA
InterlockedCompareExchange
GetProcAddress
lstrcmpiW
DisableThreadLibraryCalls
QueryPerformanceCounter
CloseHandle
VirtualAlloc
GetTickCount
HeapFree
MultiByteToWideChar
LocalFree
DisableThreadLibraryCalls
QueryPerformanceCounter
InterlockedExchange
GetLastError
GetVersionExA
InitializeCriticalSection
SetLastError
LeaveCriticalSection
GetCurrentThreadId
UnhandledExceptionFilter
GetCurrentThreadId
HeapAlloc
InitializeCriticalSection
GetModuleFileNameW
Sleep
InterlockedCompareExchange
GetCurrentThreadId
GetModuleFileNameW
VirtualProtect
GetCurrentThreadId
CreateThread
lstrlenA
lstrcmpiW
GetCurrentProcess
GetVersionExA
GetModuleHandleA
CreateEventW
HeapDestroy
Sleep
CreateFileW
CreateThread
LocalFree
LocalFree
InterlockedIncrement
MultiByteToWideChar
GetProcessHeap
ReadFile
LeaveCriticalSection
CreateEventW
user32
GetSysColor
LoadStringW
GetSysColor
EnableWindow
GetDC
EnableWindow
EnableWindow
SendDlgItemMessageW
DispatchMessageW
InvalidateRect
InvalidateRect
IsWindow
IsWindow
DefWindowProcW
DispatchMessageW
GetWindowLongW
KillTimer
GetDC
EndDialog
PostQuitMessage
GetFocus
IsDlgButtonChecked
GetDlgItem
DispatchMessageW
EndPaint
TranslateMessage
SendDlgItemMessageW
SetWindowPos
SendMessageW
EnableWindow
EndDialog
SetDlgItemTextW
InvalidateRect
DispatchMessageW
GetFocus
BeginPaint
GetDlgItem
GetSystemMetrics
EnableWindow
SetWindowLongW
LoadIconW
SendDlgItemMessageW
ReleaseDC
IsDlgButtonChecked
SetTimer
SetDlgItemTextW
SetFocus
DispatchMessageW
MessageBoxW
LoadIconW
IsWindow
EnableWindow
SetWindowPos
SetWindowPos
GetDC
KillTimer
GetClientRect
KillTimer
ShowWindow
LoadCursorW
PostQuitMessage
SetTimer
ShowWindow
LoadIconW
SetDlgItemTextW
DispatchMessageW
DefWindowProcW
BeginPaint
GetDesktopWindow
gdi32
CombineRgn
GetPixel
BitBlt
GetBrushOrgEx
SelectObject
CreateDIBSection
SetWindowExtEx
Polygon
SetPixel
SetPixel
RoundRect
GetPixel
SetBkColor
CreateFontA
StretchBlt
SetBrushOrgEx
PatBlt
RoundRect
SetBkMode
SetTextColor
SetBkMode
BitBlt
Ellipse
GetWindowOrgEx
SetWindowExtEx
CreateFontA
MoveToEx
GetBkMode
PatBlt
Polygon
RoundRect
CreateSolidBrush
SetBkMode
GetWindowExtEx
StretchBlt
CreateBitmapIndirect
LineTo
SelectObject
GetCurrentObject
CreateBitmapIndirect
BitBlt
CreateBitmap
GetBrushOrgEx
GetWindowExtEx
Rectangle
SetBkMode
SetBkMode
CreateRectRgn
GetBkMode
BitBlt
GetBkMode
GetBkColor
SetBkColor
CreateSolidBrush
RoundRect
CreateDIBSection
GetBkColor
GetBkMode
CreateFontA
CreateFontIndirectA
Polygon
GetBkMode
SetBkMode
SetPixel
SetTextColor
CombineRgn
SetTextColor
GetPixel
SelectObject
Sections
.text Size: 52KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ