Static task
static1
Behavioral task
behavioral1
Sample
9e915ada54d8876eae61e211d7fea33a26466c8d19e3a13fad34173eb2f876a9.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
9e915ada54d8876eae61e211d7fea33a26466c8d19e3a13fad34173eb2f876a9.exe
Resource
win10v2004-20221111-en
General
-
Target
9e915ada54d8876eae61e211d7fea33a26466c8d19e3a13fad34173eb2f876a9
-
Size
241KB
-
MD5
0c557302c82cb29dc6b3e457df8be3f2
-
SHA1
2591d7d278fc637a789905b905972018e3e24782
-
SHA256
9e915ada54d8876eae61e211d7fea33a26466c8d19e3a13fad34173eb2f876a9
-
SHA512
cab34045bd5fadce805a38c15848052688e45116c6a51c511d5a33429aa265197d9e074d89573fc5c36b0773a4386d89e2272bbb491eaeae8856f02c9f7ad316
-
SSDEEP
3072:X7PBbB4HfmhZOGjzmTfwQaIvDL3UZ50beEPDELg:X75BgfmhQ+SnL3k5WDE
Malware Config
Signatures
Files
-
9e915ada54d8876eae61e211d7fea33a26466c8d19e3a13fad34173eb2f876a9.exe windows x86
9058607b4021ef3ec141cd81a8ba5f19
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalAddAtomA
GlobalFlags
GetThreadTimes
WriteConsoleInputW
FindNextFileW
Thread32Next
ReadConsoleA
Process32First
AddAtomW
Heap32ListFirst
GetBinaryTypeA
WritePrivateProfileSectionW
GetCommMask
ExpandEnvironmentStringsA
SetLocaleInfoW
EscapeCommFunction
EnumTimeFormatsW
CallNamedPipeW
SetConsoleActiveScreenBuffer
GetCommTimeouts
FindCloseChangeNotification
GetBinaryTypeA
SetThreadExecutionState
GetPrivateProfileSectionA
SetNamedPipeHandleState
GetTimeFormatW
GlobalGetAtomNameA
CreateConsoleScreenBuffer
GetProcessAffinityMask
GetProcessShutdownParameters
LocalFlags
SetHandleInformation
Process32First
LocalShrink
CreateHardLinkW
IsBadWritePtr
WritePrivateProfileSectionA
ClearCommBreak
CreatePipe
user32
GetWindowRgn
CreateDialogParamA
RegisterClassExW
PostThreadMessageA
SetWindowsHookW
EnumDisplaySettingsExW
CharPrevW
SetWindowTextA
CallNextHookEx
FindWindowExW
TranslateAcceleratorA
FindWindowA
UpdateWindow
IsZoomed
FindWindowExA
SetProcessWindowStation
WINNLSEnableIME
CreateWindowExA
WINNLSGetEnableStatus
DdeCmpStringHandles
UnhookWindowsHookEx
GetTitleBarInfo
MonitorFromPoint
Sections
.text Size: 223KB - Virtual size: 228KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.alt Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.alt Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.alt Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.alt Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.alt Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 512B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 512B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE