Static task
static1
Behavioral task
behavioral1
Sample
9ed6430a9af7fb51d6ef3b3acb628d627cd9b6bf6875d137b978952fd1cab095.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
9ed6430a9af7fb51d6ef3b3acb628d627cd9b6bf6875d137b978952fd1cab095.exe
Resource
win10v2004-20220812-en
General
-
Target
9ed6430a9af7fb51d6ef3b3acb628d627cd9b6bf6875d137b978952fd1cab095
-
Size
36KB
-
MD5
d18af55dcd00e9c1c4a234b09357de11
-
SHA1
890c819e2b24f9072fd7955d6be910046879d1af
-
SHA256
9ed6430a9af7fb51d6ef3b3acb628d627cd9b6bf6875d137b978952fd1cab095
-
SHA512
e718906491a0bd27b7d8b7a42945bc60b46987f40c337d9b85387906f11a32185a282000a7da456e0bb573e182765c1aca91f344b33b85d139f9fea48e019a77
-
SSDEEP
384:77mhGgnYtUCMdxbr+vQxopGfuLOTOZ4k8aGl3r2BnBM3SqvCQUz2Bn:LKCkb6vQxo2umHkQl30BM3vvCQUc
Malware Config
Signatures
Files
-
9ed6430a9af7fb51d6ef3b3acb628d627cd9b6bf6875d137b978952fd1cab095.exe windows x86
5ef0b22c5840774d91ca89532b3f23b9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
ord17
kernel32
CreateFileA
GetFileSize
HeapAlloc
HeapFree
GetProcessHeap
ReadFile
CloseHandle
MapViewOfFile
UnmapViewOfFile
CreateFileMappingA
RtlZeroMemory
ExitProcess
GetPrivateProfileIntA
GetFileAttributesA
GetSystemDirectoryA
lstrcatA
GetPrivateProfileStringA
GetModuleFileNameA
GetModuleHandleA
lstrcpyA
FreeLibrary
GetCurrentProcess
OpenProcess
GetProcAddress
LoadLibraryA
DuplicateHandle
LocalFree
VirtualFree
VirtualQueryEx
ReadProcessMemory
VirtualAlloc
VirtualProtectEx
GetSystemInfo
WriteProcessMemory
RtlMoveMemory
user32
SendMessageA
DialogBoxParamA
EnableWindow
EndDialog
GetDlgItem
MessageBoxA
GetWindowTextA
FindWindowExA
wsprintfA
LoadIconA
KillTimer
SendDlgItemMessageA
SetTimer
GetWindowThreadProcessId
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.khe Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE