Static task
static1
Behavioral task
behavioral1
Sample
a9f1d01f33aaf53e7e8724c2f0ad3665f021f198bbc00351c7923c5f84c8431b.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a9f1d01f33aaf53e7e8724c2f0ad3665f021f198bbc00351c7923c5f84c8431b.exe
Resource
win10v2004-20220812-en
General
-
Target
a9f1d01f33aaf53e7e8724c2f0ad3665f021f198bbc00351c7923c5f84c8431b
-
Size
316KB
-
MD5
dfcc41fa29371bd00acdd0e6a416cb5b
-
SHA1
112394c048da6aa42491e097a25eefb1a948dfaf
-
SHA256
a9f1d01f33aaf53e7e8724c2f0ad3665f021f198bbc00351c7923c5f84c8431b
-
SHA512
bee5cc75296f57737b662f07281be2d414ddbd3de85d032d5a6da592181077a7240416794ba1f1497881161e7222fce684c3196156ea4bd9929acb5ae68672d5
-
SSDEEP
6144:uEvyUATRbXo0VgLmIRHI4Zo4v7Q1FJI7ktFDMkSoFy/Q:sbDVgL3o4ZXvWJftF7Fy/Q
Malware Config
Signatures
Files
-
a9f1d01f33aaf53e7e8724c2f0ad3665f021f198bbc00351c7923c5f84c8431b.exe windows x86
5b220eba4d457369128172d51935c775
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetDialogBaseUnits
MessageBoxA
CloseWindow
EndDeferWindowPos
FindWindowExA
OpenIcon
GetWindowPlacement
GetWindowTextA
CreateDialogIndirectParamA
DestroyWindow
IsChild
GetWindowRect
MoveWindow
AdjustWindowRect
MessageBoxIndirectA
gdi32
CreateCompatibleBitmap
GdiGetBatchLimit
GdiComment
DescribePixelFormat
ExtFloodFill
CreateDCW
CreateFontW
CreateDCA
FrameRgn
DeleteEnhMetaFile
comctl32
ord14
ord13
ord16
InitializeFlatSB
ord2
PropertySheetW
CreatePropertySheetPageW
PropertySheetA
ord4
CreatePropertySheetPageA
advapi32
RegQueryInfoKeyA
OpenBackupEventLogW
RegOverridePredefKey
OpenThreadToken
RegCreateKeyExA
RegEnumKeyA
RegQueryValueExA
RegDeleteKeyA
ReportEventW
RegCreateKeyA
shlwapi
StrRChrW
StrRStrIW
StrCmpNA
StrChrA
StrCSpnA
kernel32
GetSystemDefaultLangID
MultiByteToWideChar
GetCurrencyFormatA
OpenMutexA
LocalReAlloc
IsBadCodePtr
LocalHandle
IsBadWritePtr
WritePrivateProfileStructA
GetProfileIntA
GetModuleHandleA
GetProcAddress
SetHandleInformation
VirtualAllocEx
ReleaseSemaphore
HeapUnlock
GetStartupInfoA
GetThreadLocale
GetDateFormatA
IsBadStringPtrA
netapi32
NetConfigGetAll
NetGetJoinInformation
NetConnectionEnum
NetErrorLogClear
NetWkstaUserGetInfo
NetAuditRead
NetFileGetInfo
NetFileClose
NetErrorLogWrite
NetConfigSet
NetFileEnum
NetErrorLogRead
msvcrt
_exit
fputc
fwrite
fread
free
fsetpos
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
fopen
ftell
_fsopen
fscanf
fputs
fseek
_fullpath
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 305KB - Virtual size: 304KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 98KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ