Static task
static1
Behavioral task
behavioral1
Sample
2f9e9ab975995c16046f2766197fe1be0c43a8256d9366365728143ff4e0a28a.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
2f9e9ab975995c16046f2766197fe1be0c43a8256d9366365728143ff4e0a28a.exe
Resource
win10v2004-20220812-en
General
-
Target
2f9e9ab975995c16046f2766197fe1be0c43a8256d9366365728143ff4e0a28a
-
Size
3.5MB
-
MD5
ccbfb16b1aac2b5e64b782894ee027b8
-
SHA1
9cc301c93dba02e3b51e666ab949b2e9bd5aa85b
-
SHA256
2f9e9ab975995c16046f2766197fe1be0c43a8256d9366365728143ff4e0a28a
-
SHA512
e9e366f5e426c267595edc27307479881a4bc607d5f6da228133c8b217895b7f9a5a28ee74dd48be42437dccf984c8e837f7d7c3e977fbb4b4fdab178eae9a9a
-
SSDEEP
98304:q3yUCc5mvZU32XtEoXvgN0xQcxypknbgQS5/:qiU+f+oXJPxnb6
Malware Config
Signatures
Files
-
2f9e9ab975995c16046f2766197fe1be0c43a8256d9366365728143ff4e0a28a.exe windows x64
be66b3e122f183bf5ee19a17edcf77ac
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
GetVolumeInformationW
user32
InvalidateRect
gdi32
CreateHatchBrush
advapi32
RegDeleteValueW
shell32
ShellExecuteW
ole32
OleInitialize
oleaut32
SafeArrayDestroy
comctl32
InitCommonControlsEx
msimg32
AlphaBlend
shlwapi
PathFindFileNameW
uxtheme
DrawThemeBackground
oledlg
OleUIBusyW
gdiplus
GdipCreateFromHDC
oleacc
CreateStdAccessibleObject
imm32
ImmReleaseContext
winmm
PlaySoundW
winspool.drv
ClosePrinter
iphlpapi
GetInterfaceInfo
msvcrt
_wcsnicmp
psapi
GetMappedFileNameW
Sections
.text Size: 2.2MB - Virtual size: 4.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 95KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ