_ExitWindowsExExitWindowsEx@0
Static task
static1
Behavioral task
behavioral1
Sample
c9ad20056392fa3e18a2e99f671328ad74a73a59235fdc2db70439fe49c7b537.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c9ad20056392fa3e18a2e99f671328ad74a73a59235fdc2db70439fe49c7b537.exe
Resource
win10v2004-20220901-en
General
-
Target
c9ad20056392fa3e18a2e99f671328ad74a73a59235fdc2db70439fe49c7b537
-
Size
175KB
-
MD5
895d7e1d02d716a833cbb77188e12eb6
-
SHA1
cca8a175c8e6364e701af587ecae68598b379840
-
SHA256
c9ad20056392fa3e18a2e99f671328ad74a73a59235fdc2db70439fe49c7b537
-
SHA512
47cbd0472cb86ee5f4d8c4ea023bbcd044a548eef3394db97db5c768703111b6e45957d340873d442689598195c48ec2ede5f10bce4ae62c8e2bd0928b2a24ec
-
SSDEEP
3072:c416h+EQY5NLqsX/Lk9Xff94XeZYrQfx8G3IXvgXGiQhxBH5:QXrssX/QHyOZE8zovgWiq
Malware Config
Signatures
Files
-
c9ad20056392fa3e18a2e99f671328ad74a73a59235fdc2db70439fe49c7b537.exe windows x86
68494bfb8edba9f25327675a9d26c4a8
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetDialogBaseUnits
GrayStringW
CreateMenu
IsWindow
DeferWindowPos
GetDesktopWindow
GetMenuState
SendNotifyMessageW
GetForegroundWindow
AppendMenuW
CloseDesktop
IsZoomed
kernel32
GetModuleHandleA
GetOEMCP
PulseEvent
CreateThread
CreateDirectoryA
GetFileInformationByHandle
SetNamedPipeHandleState
lstrcmpiA
psapi
QueryWorkingSet
shlwapi
PathUnmakeSystemFolderA
advapi32
RegQueryValueExA
RegQueryValueExW
RegReplaceKeyA
Exports
Exports
Sections
.text Size: 137KB - Virtual size: 144KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ