Static task
static1
Behavioral task
behavioral1
Sample
9c777d23c3bb3e2cceec4aac3f4e24767b5bfe2d2ba5a496c63fc04df2d4df29.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9c777d23c3bb3e2cceec4aac3f4e24767b5bfe2d2ba5a496c63fc04df2d4df29.exe
Resource
win10v2004-20220812-en
General
-
Target
9c777d23c3bb3e2cceec4aac3f4e24767b5bfe2d2ba5a496c63fc04df2d4df29
-
Size
622KB
-
MD5
64c1ae925ea4f1e3a63e053ee46ca1ea
-
SHA1
1b6422211d67344f0f70574834d7613f35337216
-
SHA256
9c777d23c3bb3e2cceec4aac3f4e24767b5bfe2d2ba5a496c63fc04df2d4df29
-
SHA512
bf42cd4eee61a938192c6d7d676bf3ea66297e77ef781f010d33fa35114d20291d6b5879031afd837be73050e1ab0d9f4354f9e978ccb727fe3fea924074519b
-
SSDEEP
12288:IFrlL6FbkxOzSBWPZ4U6oWGGAz1KX2qg0dkxnLglZzzkTIkxaDMOHK:Q16COzSBMCOYAz1oBXdqEP3kTIk4/H
Malware Config
Signatures
Files
-
9c777d23c3bb3e2cceec4aac3f4e24767b5bfe2d2ba5a496c63fc04df2d4df29.exe windows x86
1a3f8e5f440f87950d009efc6822ec7f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetProcAddress
LoadLibraryA
VirtualProtect
GetModuleFileNameA
ExitProcess
avicap32.dll
capCreateCaptureWindowA
oleaut32.dll
SysFreeString
comctl32.dll
ImageList_SetIconSize
version.dll
VerQueryValueA
urlmon.dll
URLDownloadToFileA
user32.dll
GetKeyboardType
kernel32.dll
Sleep
advapi32.dll
RegQueryValueExA
shell32.dll
ShellExecuteA
winmm.dll
waveInUnprepareHeader
msvfw32.dll
DrawDibDraw
gdi32.dll
UnrealizeObject
oleaut32
VariantChangeTypeEx
user32
MessageBoxA
Sections
Size: - Virtual size: 588KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc0 Size: - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 184KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp0 Size: 20KB - Virtual size: 46KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp1 Size: 554KB - Virtual size: 553KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 46KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ