Static task
static1
Behavioral task
behavioral1
Sample
9c7f4d951b57cb7c96f229e1883700249980750fdeae5492db348756f7751881.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
9c7f4d951b57cb7c96f229e1883700249980750fdeae5492db348756f7751881.exe
Resource
win10v2004-20221111-en
General
-
Target
9c7f4d951b57cb7c96f229e1883700249980750fdeae5492db348756f7751881
-
Size
5.0MB
-
MD5
90c691cb55f6d069845e3c1e5d6c111a
-
SHA1
4e5f23c286f49e3a785d8edc04bf9b660be88112
-
SHA256
9c7f4d951b57cb7c96f229e1883700249980750fdeae5492db348756f7751881
-
SHA512
494bec15e523157ad7199deb670f9169d1e3f90640e99b1612fb287b100751267b56a4065c159b61d30c984853a820145d972984a884fbb62694457135918eef
-
SSDEEP
24576:af8qI3toxe6XvCaQmHjzhsSxYh1rVSd8oYBtVeZqg9GyPNS/ay6N5NvXE6rcWKc:8tCaQsjJYhlW8BkrGIv
Malware Config
Signatures
Files
-
9c7f4d951b57cb7c96f229e1883700249980750fdeae5492db348756f7751881.exe windows x86
8537d0746838321c173f6576ca4852dc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadResource
SetErrorMode
GetCurrentProcessId
InterlockedDecrement
VirtualAlloc
GetLocalTime
GetLastError
GetStdHandle
GetVersion
CloseHandle
GetCommandLineA
VirtualProtect
FormatMessageA
GetThreadLocale
ResetEvent
TlsGetValue
VirtualQuery
SizeofResource
LeaveCriticalSection
LocalFree
lstrcpyA
GetStdHandle
GlobalReAlloc
GetProcAddress
GetVersionExA
CompareStringA
FindFirstFileA
GlobalReAlloc
CreateThread
LeaveCriticalSection
EnterCriticalSection
GetProcAddress
MulDiv
FreeResource
lstrlenA
SetEvent
GetCurrentThreadId
GetCurrentThreadId
SetThreadLocale
LoadLibraryA
LocalAlloc
GetProcAddress
WriteFile
VirtualFree
WaitForSingleObject
GetModuleHandleA
VirtualAlloc
GetModuleFileNameA
VirtualQuery
Sleep
GetVersion
SetFilePointer
user32
MapWindowPoints
CharNextA
PostQuitMessage
GetMenuItemCount
CheckMenuItem
RemovePropA
GetSystemMenu
DrawEdge
SetScrollInfo
InflateRect
EnumThreadWindows
TranslateMDISysAccel
LoadBitmapA
GetDCEx
CharNextA
PeekMessageA
GetKeyboardState
BeginPaint
ReleaseDC
GetParent
DefWindowProcA
SetCursor
GetTopWindow
DrawIcon
SetScrollPos
InsertMenuItemA
EnumWindows
ShowWindow
IsDialogMessageA
GetActiveWindow
TranslateMessage
LoadCursorA
GetDesktopWindow
WaitMessage
GetKeyNameTextA
MessageBoxA
GetIconInfo
AdjustWindowRectEx
OffsetRect
ActivateKeyboardLayout
RedrawWindow
GetMenuItemID
ReleaseCapture
ClientToScreen
RegisterWindowMessageA
GetWindow
GetMenuStringA
CallWindowProcA
GetMenuState
RemoveMenu
CallNextHookEx
GetMenuItemInfoA
PtInRect
GetKeyboardLayoutList
GetKeyboardLayout
GetKeyboardType
GetKeyState
LoadStringA
GetClassNameA
TrackPopupMenu
IsRectEmpty
GetSystemMetrics
DestroyMenu
SetClassLongA
GetScrollRange
DefFrameProcA
ScreenToClient
RegisterClipboardFormatA
GetLastActivePopup
CharToOemA
MapVirtualKeyA
GetDC
FillRect
SetWindowsHookExA
IntersectRect
EnableScrollBar
SetScrollRange
DestroyIcon
GetScrollPos
GetMenu
IsWindow
FindWindowA
SetTimer
GetWindowThreadProcessId
DrawIconEx
SetFocus
GetSubMenu
MessageBoxA
GetCursor
GetSysColorBrush
DestroyCursor
UpdateWindow
EnableWindow
ScrollWindow
DrawTextA
gdi32
SetBkMode
GetStockObject
CreatePalette
SetPixel
GetTextMetricsA
DeleteDC
SetTextColor
LineTo
GetBitmapBits
BitBlt
PatBlt
GetCurrentPositionEx
CreateBitmap
SaveDC
GetDeviceCaps
CreateCompatibleDC
SetBkColor
GetPixel
CreateDIBitmap
GetSystemPaletteEntries
SetDIBColorTable
GetTextExtentPoint32A
CreatePenIndirect
SetStretchBltMode
SetROP2
IntersectClipRect
DeleteObject
SetWindowOrgEx
SetViewportOrgEx
MoveToEx
ExcludeClipRect
StretchBlt
GetBrushOrgEx
UnrealizeObject
GetClipBox
RealizePalette
Sections
ksjfaf Size: 5.0MB - Virtual size: 5.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
ewrups Size: 4KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
saofyw Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
sahwrt Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
aywurt Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE