Static task
static1
Behavioral task
behavioral1
Sample
9357e050bb88ef3f15ddad3a02793ecf83e196db259c5f2193c6b4df7cbf0e54.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
9357e050bb88ef3f15ddad3a02793ecf83e196db259c5f2193c6b4df7cbf0e54.exe
Resource
win10v2004-20220812-en
General
-
Target
9357e050bb88ef3f15ddad3a02793ecf83e196db259c5f2193c6b4df7cbf0e54
-
Size
664KB
-
MD5
4dfef84296460240a86e6b5e913a9463
-
SHA1
22c1c704e82ce4eb85b372c510cc11a66417505f
-
SHA256
9357e050bb88ef3f15ddad3a02793ecf83e196db259c5f2193c6b4df7cbf0e54
-
SHA512
669d3b14cf4f92db2f5d387833013d181fa56850da25183ae2a5bccf667c685bc5470a8f6d5653ed83846730af4b0c0d6fa24eed2c9d69c8a7823bb467fadfab
-
SSDEEP
12288:g/r3cWGWb0I4Eb00y/9Sy/AaDDDDDDDalpjW6wnD:g7cswEb0XwJzpj
Malware Config
Signatures
Files
-
9357e050bb88ef3f15ddad3a02793ecf83e196db259c5f2193c6b4df7cbf0e54.exe windows x86
54ea66e77ea81a99802cd0e0836c2641
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
LoadIconA
RegisterClassExA
CreateWindowExA
GetMessageA
TranslateMessage
DispatchMessageA
UpdateWindow
DefWindowProcA
KillTimer
RegisterClassA
EndDialog
PostQuitMessage
ShowWindow
EnableWindow
PeekMessageA
SetWindowLongA
GetSysColor
GetDC
SendMessageA
GetDlgItem
EnableMenuItem
ScreenToClient
SetTimer
LoadCursorA
GetFocus
kernel32
GetEnvironmentStringsW
LCMapStringW
LCMapStringA
GetStringTypeW
MultiByteToWideChar
LoadLibraryA
HeapReAlloc
GetOEMCP
GetCPInfo
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
InterlockedIncrement
HeapAlloc
CreateFileA
TlsSetValue
GetTickCount
GetFileType
TlsGetValue
UnmapViewOfFile
WriteConsoleA
LocalFree
InterlockedExchange
GetACP
TerminateProcess
CloseHandle
SetUnhandledExceptionFilter
ReadFile
FlushFileBuffers
SetFilePointer
GetStringTypeA
WideCharToMultiByte
RaiseException
HeapSize
TlsFree
GlobalLock
Sleep
CreateDirectoryA
GetEnvironmentStrings
GetCurrentProcess
FreeEnvironmentStringsA
GetVersionExA
ExitProcess
HeapDestroy
QueryPerformanceCounter
GetLastError
VirtualAlloc
GetProcessHeap
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
GetProcAddress
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsW
SetHandleCount
GetStdHandle
GetCurrentThreadId
TlsAlloc
SetLastError
GetEnvironmentVariableA
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
InterlockedDecrement
Sections
.text Size: 40KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 612KB - Virtual size: 612KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE