Static task
static1
Behavioral task
behavioral1
Sample
9c797d519c8e44143bbafead19163324639d81ead056a0e8110f2fc85567d55e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9c797d519c8e44143bbafead19163324639d81ead056a0e8110f2fc85567d55e.exe
Resource
win10v2004-20220901-en
General
-
Target
9c797d519c8e44143bbafead19163324639d81ead056a0e8110f2fc85567d55e
-
Size
806KB
-
MD5
db076f8838eb42e25ffdd627c7c00e0a
-
SHA1
216141d1f0d7cd2d856a555bb5291087b7c0d84d
-
SHA256
9c797d519c8e44143bbafead19163324639d81ead056a0e8110f2fc85567d55e
-
SHA512
d9b4476f0176c78df69e6f723bebdbf0f2c4e88997505b9b530d2fff5683222f9940f07971411490fde4e95eaecff5003b9d792f7949f169e604ce41dbb5927e
-
SSDEEP
12288:dUMN7TGzsejR+XIgR3rqp0N3mABCLtMOjKugyKknCQ8Ak+3nevgxW:dUMJEjEY4bH1BaebryKkCkevB
Malware Config
Signatures
Files
-
9c797d519c8e44143bbafead19163324639d81ead056a0e8110f2fc85567d55e.exe windows x86
57e55aa240b03f9a1e041ff5535ac5c4
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualProtect
SetLastError
CreateEventW
GetSystemTimeAsFileTime
GetProcessHeap
LoadLibraryA
lstrcmpiW
GetModuleHandleW
CreateFileW
HeapAlloc
LoadLibraryW
GetModuleHandleW
CreateEventW
GetProcAddress
GetModuleFileNameA
MultiByteToWideChar
UnhandledExceptionFilter
GetProcessHeap
GetCurrentThreadId
HeapDestroy
GetCurrentThreadId
InterlockedDecrement
FreeLibrary
EnterCriticalSection
InterlockedExchange
LocalFree
lstrlenA
LocalAlloc
GetModuleFileNameW
GetCurrentProcess
LoadLibraryW
GetSystemTimeAsFileTime
CreateFileW
MultiByteToWideChar
CreateThread
GetCurrentThreadId
LocalAlloc
GetCurrentThreadId
UnhandledExceptionFilter
MultiByteToWideChar
GetProcAddress
LocalFree
MultiByteToWideChar
HeapAlloc
GetCurrentThreadId
lstrcmpiW
GetModuleFileNameA
GetCurrentProcessId
VirtualProtect
GetProcessHeap
GetTickCount
QueryPerformanceCounter
LocalAlloc
CreateFileW
GetSystemTimeAsFileTime
HeapDestroy
VirtualAlloc
GetVersionExA
UnhandledExceptionFilter
VirtualProtect
CreateFileW
GetVersionExA
GetSystemTimeAsFileTime
GetTickCount
GetModuleFileNameA
GetModuleFileNameA
CreateFileW
CreateEventW
GetModuleFileNameW
MultiByteToWideChar
GetSystemTimeAsFileTime
CreateEventW
GetProcessHeap
GetLastError
HeapFree
GetSystemTimeAsFileTime
InterlockedCompareExchange
VirtualProtect
lstrlenA
CreateFileW
VirtualProtect
LocalAlloc
GetTickCount
GetProcessHeap
EnterCriticalSection
LocalAlloc
LeaveCriticalSection
LoadLibraryW
CreateFileW
HeapAlloc
user32
SetWindowPos
MessageBoxW
GetParent
SetCursor
SendDlgItemMessageW
SetCursor
KillTimer
GetSysColor
SetWindowTextW
SetFocus
MessageBoxW
PostQuitMessage
SetWindowTextW
EnableWindow
GetWindowLongW
SendDlgItemMessageW
GetWindowLongW
SendDlgItemMessageW
EndPaint
GetFocus
LoadIconW
SetCursor
GetDC
TranslateMessage
DestroyWindow
GetDC
GetDlgItem
ShowWindow
SendMessageW
DestroyWindow
SetDlgItemTextW
SetWindowLongW
LoadCursorW
KillTimer
IsDlgButtonChecked
SetForegroundWindow
SendMessageW
GetWindowLongW
TranslateMessage
DispatchMessageW
SendMessageW
SetFocus
GetSystemMetrics
EnableWindow
InvalidateRect
GetSystemMetrics
IsWindow
SendDlgItemMessageW
KillTimer
ShowWindow
GetWindowRect
SendDlgItemMessageW
SetCursor
DestroyWindow
SendMessageW
TranslateMessage
DestroyWindow
SendDlgItemMessageW
EnableWindow
GetDC
LoadCursorW
ShowWindow
KillTimer
GetClientRect
GetSysColor
SetFocus
EnableWindow
SetWindowTextW
DefWindowProcW
SendMessageW
GetSystemMetrics
DispatchMessageW
wsprintfA
IsWindow
GetWindowRect
SetFocus
ReleaseDC
EnableWindow
BeginPaint
DialogBoxParamW
PostQuitMessage
TranslateMessage
Sections
.text Size: 718KB - Virtual size: 968KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 82KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ