Static task
static1
Behavioral task
behavioral1
Sample
9c97ed25d0988599762b2674b8a93e9ec2676ec1f31bd88bca5e0ccf01eb8420.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
9c97ed25d0988599762b2674b8a93e9ec2676ec1f31bd88bca5e0ccf01eb8420.exe
Resource
win10v2004-20220901-en
General
-
Target
9c97ed25d0988599762b2674b8a93e9ec2676ec1f31bd88bca5e0ccf01eb8420
-
Size
414KB
-
MD5
dc1f85a0bd2523c5262902a1a7ff940d
-
SHA1
c862eaad837a2d85f54509f6437e1ce5563ba30c
-
SHA256
9c97ed25d0988599762b2674b8a93e9ec2676ec1f31bd88bca5e0ccf01eb8420
-
SHA512
b46d049adf2e69c68420f5f809b70f08715c85279575d400489fc80e6adbafc3670490c83c1848e4b3cf67e5b4ca0a5651cb663e13c3635c442a54ecefe6b894
-
SSDEEP
12288:zPDWe/xLfTv05hF8i66cxae2CpeZ7PwKq:zrWGnYNcxz2hI
Malware Config
Signatures
Files
-
9c97ed25d0988599762b2674b8a93e9ec2676ec1f31bd88bca5e0ccf01eb8420.exe windows x86
e66a8d637f386aab08b8e17bbe0fc1a6
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcmpiW
FindResourceW
MultiByteToWideChar
GetUserDefaultUILanguage
SetCurrentDirectoryW
CreateDirectoryW
CreateFileW
FlushFileBuffers
WriteFile
CloseHandle
WaitForSingleObject
ResumeThread
CreateProcessW
FindResourceExW
FreeResource
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
InitializeCriticalSection
ReadConsoleW
ReadFile
SetEndOfFile
GetStringTypeW
GetTimeZoneInformation
WriteConsoleW
SetFilePointerEx
SetStdHandle
LCMapStringW
CompareStringW
SizeofResource
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetSystemTimeAsFileTime
GetCurrentProcessId
GetPrivateProfileStringW
GetFileType
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
GetConsoleMode
GetConsoleCP
GetStdHandle
GetStartupInfoW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
TerminateProcess
Sleep
InitializeCriticalSectionAndSpinCount
SetUnhandledExceptionFilter
UnhandledExceptionFilter
AreFileApisANSI
GetModuleHandleExW
ExitProcess
GetCommandLineW
ExitThread
CreateThread
DeleteFileW
MoveFileExW
GetFileAttributesExW
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
FindClose
FindNextFileW
LockResource
LoadResource
LoadLibraryExW
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
FreeLibrary
FlushInstructionCache
GetCurrentThreadId
GetCurrentProcess
LeaveCriticalSection
EnterCriticalSection
SetLastError
WideCharToMultiByte
DeleteCriticalSection
InitializeCriticalSectionEx
GetProcessHeap
HeapSize
HeapFree
HeapReAlloc
HeapAlloc
HeapDestroy
GetLastError
RaiseException
FindFirstFileExW
RtlUnwind
EncodePointer
VirtualFree
VirtualAlloc
IsProcessorFeaturePresent
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
OutputDebugStringW
IsDebuggerPresent
SetEnvironmentVariableA
QueryPerformanceCounter
DecodePointer
user32
SendMessageW
DestroyWindow
ShowWindow
CreateDialogParamW
GetDlgItem
CharNextW
LoadStringW
PostMessageW
PostQuitMessage
MoveWindow
SetWindowPos
IsWindowVisible
SetDlgItemTextW
SetFocus
SetTimer
KillTimer
EnableWindow
GetSystemMetrics
UpdateWindow
GetMessageW
EndPaint
SetWindowRgn
PeekMessageW
SetWindowTextW
GetWindowTextW
GetWindowTextLengthW
GetClientRect
GetWindowRect
MessageBoxW
MessageBeep
ClientToScreen
MapWindowPoints
PtInRect
GetParent
GetWindow
LoadImageW
GetDC
ReleaseDC
SetCursor
GetCursorPos
ScreenToClient
FillRect
CopyRect
LoadCursorW
SetWindowLongW
DispatchMessageW
InvalidateRect
TranslateMessage
GetWindowLongW
CallWindowProcW
DefWindowProcW
BeginPaint
UnregisterClassW
GetMonitorInfoW
MonitorFromWindow
IsDialogMessageW
GetDlgCtrlID
gdi32
CreateSolidBrush
SetTextColor
SetBkMode
GetStockObject
GetCurrentObject
CreateRoundRectRgn
SelectObject
DeleteObject
DeleteDC
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt
GetTextMetricsW
advapi32
RegOpenKeyExW
RegQueryValueExW
RegSetValueExW
RegQueryInfoKeyW
RegCloseKey
RegEnumKeyExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
shell32
ShellExecuteExW
Shell_NotifyIconW
SHGetMalloc
ShellExecuteW
SHGetSpecialFolderLocation
SHGetPathFromIDListW
ord165
SHBrowseForFolderW
ole32
CoCreateInstance
CoTaskMemRealloc
CoTaskMemFree
CoCreateGuid
CreateStreamOnHGlobal
CoUninitialize
CoInitialize
CoTaskMemAlloc
oleaut32
VarUI4FromStr
shlwapi
StrCatW
PathFindFileNameW
comctl32
InitCommonControlsEx
gdiplus
GdipAlloc
GdipFree
GdipSetStringFormatLineAlign
GdipSetStringFormatAlign
GdipDeleteStringFormat
GdipCreateStringFormat
GdipDrawString
GdipGetFontSize
GdipDeleteFont
GdipCreateFont
GdipGetLineSpacing
GdipGetEmHeight
GdipDeleteFontFamily
GdipCreateFontFamilyFromName
GdipFillRectangleI
GdipDrawRectangleI
GdipLoadImageFromStream
GdipDeletePen
GdipCreatePen1
GdipCreateSolidFill
GdipDeleteBrush
GdiplusShutdown
GdiplusStartup
GdipDrawImageRectI
GdipDeleteGraphics
GdipCreateFromHDC
GdipDisposeImage
GdipCloneImage
GdipLoadImageFromFile
winhttp
WinHttpConnect
WinHttpReadData
WinHttpOpenRequest
WinHttpAddRequestHeaders
WinHttpSendRequest
WinHttpReceiveResponse
WinHttpQueryHeaders
WinHttpOpen
wininet
InternetCloseHandle
InternetConnectW
InternetReadFile
InternetQueryOptionW
InternetSetOptionW
HttpOpenRequestW
HttpAddRequestHeadersW
HttpSendRequestW
HttpQueryInfoW
InternetOpenW
InternetGetConnectedState
Sections
.text Size: 139KB - Virtual size: 139KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ