Static task
static1
Behavioral task
behavioral1
Sample
9212c9ed2613f01d209db01887dd2e4118e9cb37c47043873debf6560ec0ac4a.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
9212c9ed2613f01d209db01887dd2e4118e9cb37c47043873debf6560ec0ac4a.exe
Resource
win10v2004-20221111-en
General
-
Target
9212c9ed2613f01d209db01887dd2e4118e9cb37c47043873debf6560ec0ac4a
-
Size
288KB
-
MD5
6c64256855e561c65794db9ca86b9ffa
-
SHA1
4fbf9dd6d93302a47b290231363e691b43c6de0a
-
SHA256
9212c9ed2613f01d209db01887dd2e4118e9cb37c47043873debf6560ec0ac4a
-
SHA512
2c075ba9f5a511dd232ca8bac4a2d4d7ac72ea5a3d74eeeb72c08f1de26d356e91cc8ad4f97be24551ed90b950490bd18b7f22e16f492837d8370059223589dd
-
SSDEEP
6144:qEYNrEZpfIGemhvk9MPNV8rawIeot32uaZgy56pBxZN9nW:qtEJeakq1VgaxejgyizZNhW
Malware Config
Signatures
Files
-
9212c9ed2613f01d209db01887dd2e4118e9cb37c47043873debf6560ec0ac4a.exe windows x86
d62d0e0688c2d31073d1a6a0e9cff1d5
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetActiveWindow
VkKeyScanA
OemToCharBuffW
SetWindowTextA
GetOpenClipboardWindow
ValidateRect
SetWindowPos
gdi32
DeleteObject
CreateFontW
ole32
FmtIdToPropStgName
CreatePointerMoniker
oleaut32
OleLoadPicturePath
kernel32
GetProcessTimes
GetConsoleOutputCP
GetNativeSystemInfo
GetCPInfoExA
InitAtomTable
HeapCreate
HeapDestroy
LocalAlloc
HeapFree
GetCurrentActCtx
LocalFree
EnumSystemCodePagesA
GetProcAddress
GetModuleHandleW
Sections
.text Size: 268KB - Virtual size: 267KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
SHARED Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ