Static task
static1
Behavioral task
behavioral1
Sample
9773cbcc62d530dabdcc2e6ba58b66e6d1348b366f44fdc88b315ef7af8a6427.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
9773cbcc62d530dabdcc2e6ba58b66e6d1348b366f44fdc88b315ef7af8a6427.exe
Resource
win10v2004-20220901-en
General
-
Target
9773cbcc62d530dabdcc2e6ba58b66e6d1348b366f44fdc88b315ef7af8a6427
-
Size
176KB
-
MD5
45499b0cdef491dae51847c83fd3dddf
-
SHA1
3a22bbf6078f91535fa8fe7c44e6cc13b971eab5
-
SHA256
9773cbcc62d530dabdcc2e6ba58b66e6d1348b366f44fdc88b315ef7af8a6427
-
SHA512
23909614d9743915f14f4d8dad57e766d79c1b6f1f329e43a9deaaa10cca4cb1318001f3fd703b914202ad1ad4be824d9de11b4adbabd5ab47a60484a1b54de8
-
SSDEEP
3072:za2LtRrDBg8CFtCRlxHpSBDfibeMIEH6JEInIUtTBzMxUoJqMVoaBY9N3k:u2JlBgbkNkbceYH6JnIUtTBzuUoJqSlU
Malware Config
Signatures
Files
-
9773cbcc62d530dabdcc2e6ba58b66e6d1348b366f44fdc88b315ef7af8a6427.exe windows x86
cacdd89e57a2f5be88c5c947b0087730
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
GetModuleHandleA
ReleaseMutex
GetSystemTime
CreateFileA
ReadFile
WaitForSingleObject
GetFileSizeEx
InterlockedExchange
SleepEx
DeleteFileW
LoadResource
FlushFileBuffers
TryEnterCriticalSection
CreateThread
LockResource
InterlockedExchangeAdd
CreateFileW
CreateEventW
SetEnvironmentVariableA
SetErrorMode
GetFileAttributesA
FormatMessageW
InterlockedCompareExchange
RegisterWaitForSingleObject
GetThreadLocale
FreeEnvironmentStringsA
HeapDestroy
GetLocalTime
GlobalUnlock
GetModuleFileNameW
LocalFree
SetEvent
WriteFileEx
CompareStringA
lstrlenW
SetFilePointerEx
SetEndOfFile
GetSystemInfo
GlobalAlloc
FormatMessageA
SetFilePointer
LocalAlloc
CloseHandle
ResetEvent
GetVersionExA
InitializeCriticalSection
GlobalFree
FindClose
DeleteFileA
lstrlenA
WaitForSingleObjectEx
GetFileSize
CompareStringW
ReadFileEx
RaiseException
CreateEventA
FreeLibrary
FindCloseChangeNotification
GetStartupInfoA
user32
GetCursorPos
DestroyWindow
ShowWindowAsync
SendMessageA
GetClientRect
RegisterClassA
TranslateMessage
LoadStringA
LoadIconW
GetWindowTextW
GetMenuItemCount
ReleaseDC
SetWindowTextA
SetWindowTextW
MsgWaitForMultipleObjectsEx
AdjustWindowRectEx
DestroyIcon
SetActiveWindow
CreateWindowExA
IsChild
SetMenuDefaultItem
CheckMenuItem
MoveWindow
DrawFocusRect
SetWindowLongW
TrackPopupMenu
SetMenuItemInfoA
SetWindowLongA
GetSystemMenu
InflateRect
GetMenu
SystemParametersInfoA
GetWindowContextHelpId
GetActiveWindow
CreateWindowExW
PostMessageA
GetForegroundWindow
LoadCursorW
DefWindowProcW
SetMenuItemInfoW
GetWindowWord
SetMenuItemBitmaps
MessageBeep
DefWindowProcA
DestroyMenu
GetKeyState
AllowSetForegroundWindow
OffsetRect
ClientToScreen
ReleaseCapture
PostMessageW
GetMenuStringW
PtInRect
GetSubMenu
UnregisterClassA
SetCapture
SetWindowPos
msi
ord194
msvcrt
_exit
_XcptFilter
_cexit
exit
_acmdln
__getmainargs
_initterm
_c_exit
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
__dllonexit
_onexit
_except_handler3
__setusermatherr
Sections
.text Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 136KB - Virtual size: 234KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ