Static task
static1
Behavioral task
behavioral1
Sample
c9c9e71baffbaaabf92892f5b3b6688e6ec8f070e54881f2874fd3fda3347fdf.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c9c9e71baffbaaabf92892f5b3b6688e6ec8f070e54881f2874fd3fda3347fdf.exe
Resource
win10v2004-20220901-en
General
-
Target
c9c9e71baffbaaabf92892f5b3b6688e6ec8f070e54881f2874fd3fda3347fdf
-
Size
173KB
-
MD5
c8f39c9d12a008d0ad2f5675c50beec6
-
SHA1
d36d7546dbc024485300e0a8be6615a721fc2feb
-
SHA256
c9c9e71baffbaaabf92892f5b3b6688e6ec8f070e54881f2874fd3fda3347fdf
-
SHA512
375ffbe4f2d96749e297acdc0dce96cb256a8e70433861329cf425f185030708463a4b29243fde4015c48b846b79d710eb7619eba509722861c5f602de41715b
-
SSDEEP
3072:em8WbIkjBn/MLenSWeYrOVu8lHdE3SjesqKrmDdwkjXZphxo:WWb3jBnYetL6FBDt+DdwkjXjhxo
Malware Config
Signatures
Files
-
c9c9e71baffbaaabf92892f5b3b6688e6ec8f070e54881f2874fd3fda3347fdf.exe windows x86
c9f56461e127837bf36240d2bdb0cf57
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WideCharToMultiByte
GetLastError
WriteFile
DeleteCriticalSection
GetCPInfoExW
EnterCriticalSection
InitializeCriticalSection
GetThreadLocale
GetEnvironmentStringsW
GetACP
SetHandleCount
RaiseException
LeaveCriticalSection
QueryPerformanceCounter
UnhandledExceptionFilter
InterlockedExchange
GetEnvironmentStrings
EnumResourceTypesA
GetStartupInfoA
GetFileType
GetVersionExA
TlsSetValue
GetTickCount
GetCPInfo
HeapSize
InterlockedIncrement
GetStdHandle
FreeEnvironmentStringsW
MultiByteToWideChar
LoadLibraryW
GetLocaleInfoA
lstrlenW
FreeEnvironmentStringsA
GetOEMCP
TlsGetValue
GetCurrentProcessId
ole32
CoGetMalloc
CoTaskMemFree
CoCreateInstance
StringFromGUID2
CoTaskMemAlloc
CoTaskMemRealloc
gdi32
SelectObject
DeleteObject
GetDeviceCaps
GetTextExtentPointA
GetTextMetricsA
CreateFontIndirectA
msimg32
AlphaBlend
TransparentBlt
Sections
.text Size: 105KB - Virtual size: 105KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.tls Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 248KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ