Static task
static1
Behavioral task
behavioral1
Sample
9688e1c43784720b6b284daa1b6e7c7ab0fb311614078a37fcd8ad779febd4f7.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
9688e1c43784720b6b284daa1b6e7c7ab0fb311614078a37fcd8ad779febd4f7.exe
Resource
win10v2004-20220812-en
General
-
Target
9688e1c43784720b6b284daa1b6e7c7ab0fb311614078a37fcd8ad779febd4f7
-
Size
233KB
-
MD5
9b93da563809080a098202f2b993222b
-
SHA1
2e6542c52ecbc305aa8606654d0f0668155c763f
-
SHA256
9688e1c43784720b6b284daa1b6e7c7ab0fb311614078a37fcd8ad779febd4f7
-
SHA512
0e1721245ce4e6426a91ebb001216a9d32c8d2d14a6c368f1e5f5ef3d239b98c28e13d23c2afb4012b991ba03ebc023f33dcac0deea1ae2ea2e005e07c9c4bbd
-
SSDEEP
6144:39CCuVwnnMhOh9skwnXlU1Roe2yLZjlS1i0:v6ynZhqz+QE18l
Malware Config
Signatures
Files
-
9688e1c43784720b6b284daa1b6e7c7ab0fb311614078a37fcd8ad779febd4f7.exe windows x86
fa2c51fb0820211f42cd8a9af6153a24
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
GetModuleHandleA
SetStdHandle
LCMapStringW
LCMapStringA
FlushFileBuffers
SetFilePointer
HeapReAlloc
VirtualAlloc
GetOEMCP
GetACP
GetCPInfo
HeapAlloc
ReadFile
GetLastError
GetStringTypeW
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
MultiByteToWideChar
GetStringTypeA
CloseHandle
comctl32
ImageList_DragEnter
ImageList_DragMove
ImageList_SetBkColor
ImageList_SetDragCursorImage
FlatSB_GetScrollProp
DrawStatusTextW
ImageList_Read
FlatSB_GetScrollInfo
CreatePropertySheetPageA
shlwapi
UrlIsNoHistoryW
SHDeleteEmptyKeyW
PathUnquoteSpacesW
PathRelativePathToW
PathIsUNCServerA
PathCanonicalizeA
PathIsDirectoryW
PathAddBackslashA
PathUnmakeSystemFolderW
StrIsIntlEqualW
PathIsRootA
PathIsContentTypeW
StrSpnA
PathIsSameRootA
Sections
.text Size: 146KB - Virtual size: 145KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 82KB - Virtual size: 81KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 419KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 704B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ