Static task
static1
Behavioral task
behavioral1
Sample
9264d31e67da485b7f6d14a80007b0f2a6d18bfd88f20533689f1bec57becb97.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
9264d31e67da485b7f6d14a80007b0f2a6d18bfd88f20533689f1bec57becb97.exe
Resource
win10v2004-20221111-en
General
-
Target
9264d31e67da485b7f6d14a80007b0f2a6d18bfd88f20533689f1bec57becb97
-
Size
14.6MB
-
MD5
339f5fd27e10fac7d09608144b92ddf8
-
SHA1
def4edfe1c03bb58dfd12fc92310b8c003d32c89
-
SHA256
9264d31e67da485b7f6d14a80007b0f2a6d18bfd88f20533689f1bec57becb97
-
SHA512
4d74decc461250c961d7384df9f5132302c8fb66502a1f39aea455cb86cb6ae071fff15ef17e73b8e1b6663aaf0f4d1ef0d8635f5cf78d0cf786b8d1a510b2ed
-
SSDEEP
196608:cAsxYimdhqnARj3rgLdidl/UY9ZkujUu4/DUqvKtj0xKFxqg5ZTOxDrOCAf+y4:cAsGimdhqnApq+7TC7PCtj0Lg5ZSDrms
Malware Config
Signatures
Files
-
9264d31e67da485b7f6d14a80007b0f2a6d18bfd88f20533689f1bec57becb97.exe windows x86
a1bf3a3f9154607f852510eb45e714af
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
HeapReAlloc
VirtualAlloc
HeapAlloc
GetOEMCP
GetACP
GetCPInfo
WriteFile
RtlUnwind
HeapFree
VirtualFree
CreateProcessA
HeapDestroy
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
ExitProcess
GetVersion
GetCommandLineA
GetStartupInfoA
GetThreadContext
GetStringTypeW
GetModuleHandleA
SetThreadContext
ReadFile
LoadLibraryA
HeapCreate
GetProcAddress
user32
BeginPaint
DrawAnimatedRects
DrawCaption
DrawEdge
DrawFocusRect
DrawFrameControl
DrawStateA
DrawTextExA
EndPaint
ExcludeUpdateRgn
GetUpdateRect
GetUpdateRgn
GetWindowDC
GetWindowRgn
LockWindowUpdate
PaintDesktop
PeekMessageA
GetMessageA
DispatchMessageA
SetTimer
gdi32
GdiGetBatchLimit
GetBoundsRect
GetROP2
SetBkColor
GdiFlush
GdiSetBatchLimit
Sections
.text Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 64.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IDATA Size: 2.5MB - Virtual size: 2.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ISKATFG Size: 4KB - Virtual size: 6B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DI7QUP Size: 4KB - Virtual size: 6B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
YTUR9B Size: 4KB - Virtual size: 6B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
YZ1VQO2 Size: 4KB - Virtual size: 6B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BCGDPO Size: 4KB - Virtual size: 6B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
ECDQJBA Size: 4KB - Virtual size: 6B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
SV3O7Y2 Size: 4KB - Virtual size: 6B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
CPMS2A8 Size: 4KB - Virtual size: 6B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UC4B6PM Size: 4KB - Virtual size: 6B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
GAQOQL Size: 4KB - Virtual size: 6B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
PRWDEAV Size: 4KB - Virtual size: 6B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BKVS5YD Size: 4KB - Virtual size: 6B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
KFZC8WU Size: 4KB - Virtual size: 6B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
I2EY4FQ Size: 4KB - Virtual size: 6B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
M0CSXXD Size: 4KB - Virtual size: 6B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
TNWD8OH Size: 4KB - Virtual size: 6B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
FUQ1PHC Size: 4KB - Virtual size: 6B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
F7NPT1S Size: 4KB - Virtual size: 6B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
FKCDE1 Size: 4KB - Virtual size: 6B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
VA3BYIQ Size: 4KB - Virtual size: 6B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ