Static task
static1
Behavioral task
behavioral1
Sample
9cd5fd7525762e0a5eb745659a1f3559df236334ee82dd0bd79ced7b1e87b6fd.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
9cd5fd7525762e0a5eb745659a1f3559df236334ee82dd0bd79ced7b1e87b6fd.exe
Resource
win10v2004-20220901-en
General
-
Target
9cd5fd7525762e0a5eb745659a1f3559df236334ee82dd0bd79ced7b1e87b6fd
-
Size
289KB
-
MD5
f0e641c7a4c0776ba1924e282b63e2f2
-
SHA1
7b25dc7e864594cc64cc185a51ae61cc6430a22b
-
SHA256
9cd5fd7525762e0a5eb745659a1f3559df236334ee82dd0bd79ced7b1e87b6fd
-
SHA512
e2451b41fff455f2d8c7cde6790c1043101fe61f202d5490e91662d5a9a78f874903c83d6fab110321db2639d315c3ad735c2fb1276b956ff4bcd2e50fdd52d5
-
SSDEEP
6144:3cIC75yWIT8ucQAFdEOqo7kJcKUO7qtDDboJdchbSTe/Tw:cyW7pQKnnGJ68JdchbS6rw
Malware Config
Signatures
Files
-
9cd5fd7525762e0a5eb745659a1f3559df236334ee82dd0bd79ced7b1e87b6fd.exe windows x86
2c80e14275699cb99984f35b8505f3f3
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
CompareStringA
CreateEventA
CreateProcessA
CreateThread
DeleteFileA
EnterCriticalSection
ExitThread
FindClose
FindFirstFileA
FindNextFileA
FormatMessageA
GetCommandLineA
GetCurrentThreadId
GetDateFormatA
GetModuleFileNameA
GetTickCount
GlobalAlloc
InitializeCriticalSection
IsBadCodePtr
LeaveCriticalSection
LoadLibraryA
MultiByteToWideChar
OpenEventA
SetEvent
SetLastError
Sleep
TerminateThread
WaitForSingleObject
WriteConsoleA
lstrcpynA
lstrlenA
user32
CreateWindowExW
DeleteMenu
EnumDisplaySettingsA
GetCursorPos
GetParent
IntersectRect
IsRectEmpty
LoadImageW
LoadStringW
MessageBoxW
MoveWindow
OffsetRect
RegisterHotKey
SendMessageW
SetCapture
SetScrollPos
WindowFromPoint
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 274KB - Virtual size: 276KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ