Static task
static1
Behavioral task
behavioral1
Sample
9a99a65ad203a43d52f463bc8254d0807c1c134584dde35cde496784c7100ffe.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
9a99a65ad203a43d52f463bc8254d0807c1c134584dde35cde496784c7100ffe.exe
Resource
win10v2004-20220812-en
General
-
Target
9a99a65ad203a43d52f463bc8254d0807c1c134584dde35cde496784c7100ffe
-
Size
92KB
-
MD5
542b16abb12a0185669e96079fc41fda
-
SHA1
6567ece25d328b5ec1d67f32fa29a69bf9030f6b
-
SHA256
9a99a65ad203a43d52f463bc8254d0807c1c134584dde35cde496784c7100ffe
-
SHA512
fe06493dbdf71f9c6101c1590d71c5ca7b17d274201afee8551c034f28e6657b2cfb1ca3b3533ff7d25ef9b9346db1a0be782e53101a8307e154d2829ca3338c
-
SSDEEP
1536:px1ue+uUYHLBHQyG008113ELzK1QiN5KG:px1P59Pb73AzQQG
Malware Config
Signatures
Files
-
9a99a65ad203a43d52f463bc8254d0807c1c134584dde35cde496784c7100ffe.exe windows x86
4899b47492726fbf9303437fca7011e1
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteFileA
FindResourceA
SizeofResource
LoadResource
LockResource
GetTempPathA
CreateFileA
CloseHandle
GetStartupInfoA
GetModuleHandleA
WriteFile
user32
GetMessageA
DrawTextA
EndDialog
KillTimer
ShowWindow
SetWindowTextA
GetDlgItem
SetTimer
SetWindowPos
GetSystemMetrics
DefWindowProcA
GetWindowRect
DialogBoxParamA
FillRect
ReleaseDC
GetWindowDC
LoadIconA
LoadCursorA
RegisterClassA
CreateWindowExA
MessageBoxA
TranslateMessage
PostQuitMessage
BeginPaint
EndPaint
InvalidateRect
DispatchMessageA
gdi32
CreateCompatibleBitmap
DeleteDC
RemoveFontResourceA
TextOutA
GetStockObject
SelectObject
SetTextColor
SetBkColor
AddFontResourceA
CreateFontA
CreateCompatibleDC
BitBlt
DeleteObject
msvcrt40
free
fread
malloc
sprintf
fclose
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
__getmainargs
_initterm
__p__acmdln
_XcptFilter
_exit
exit
fgets
strchr
strlen
strcpy
_tempnam
ftell
fopen
_stricmp
fseek
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ficken Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.icon Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE