Static task
static1
Behavioral task
behavioral1
Sample
9ef102e54f48bd7051844ce1a43818adb0c81477ef041a1be34a022e62033583.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
9ef102e54f48bd7051844ce1a43818adb0c81477ef041a1be34a022e62033583.exe
Resource
win10v2004-20221111-en
General
-
Target
9ef102e54f48bd7051844ce1a43818adb0c81477ef041a1be34a022e62033583
-
Size
416KB
-
MD5
80bef9092f0617661153b3df03bb7d50
-
SHA1
b2080b9808ee615caff03c09872072f1225fb4bb
-
SHA256
9ef102e54f48bd7051844ce1a43818adb0c81477ef041a1be34a022e62033583
-
SHA512
da4c5f289e25f653b0b7e76d0f2fbd59e666a7206ba43dd721895ea455115bb841449b718258a34ef181b26a532c8689a4f3ffde4c83b5d67fcaf4a380ed9f88
-
SSDEEP
6144:EvgJo8ZBeEiI69SD1ev4b04PV1Dc1Ym6TdnXBmlMiupXS7GOYE8iLkXory1M6K8U:YaiI7D1RJPVhxTdXS3i+82cKV98bTh
Malware Config
Signatures
Files
-
9ef102e54f48bd7051844ce1a43818adb0c81477ef041a1be34a022e62033583.exe windows x86
733f28b7586e4e2070cf6212d6b0e8c4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
gdi32
GetStockObject
BitBlt
CreateCompatibleDC
SelectObject
GetDeviceCaps
DeleteDC
CreateSolidBrush
kernel32
VirtualFree
HeapCreate
IsValidCodePage
CreateProcessA
GetEnvironmentStrings
GetVersion
GetModuleHandleW
GetACP
lstrcpynA
CloseHandle
ReadFile
GetModuleHandleA
TlsFree
MapViewOfFile
CompareStringA
RaiseException
GetCurrentThread
InterlockedCompareExchange
HeapSize
GetCPInfo
GetCommandLineW
LockResource
GetCurrentProcessId
SizeofResource
CreateProcessW
lstrlenW
VirtualQuery
GlobalUnlock
GetEnvironmentStringsW
GetThreadLocale
FindNextFileW
LCMapStringA
FindResourceW
GetConsoleCP
GlobalFree
lstrlenA
UnmapViewOfFile
SetStdHandle
GetLastError
LeaveCriticalSection
HeapAlloc
GetFileType
CreateEventA
CreateFileW
CreateEventW
GlobalLock
WaitForMultipleObjects
DuplicateHandle
FindNextFileA
CreateFileMappingA
ResetEvent
FindFirstFileA
lstrcmpA
GetProcessHeap
GetSystemInfo
GetProcAddress
DeleteFileW
SetEvent
GetEnvironmentVariableA
GetWindowsDirectoryA
DeleteFileA
CreateDirectoryA
LCMapStringW
GetFileSize
GetStartupInfoA
LoadLibraryA
GetVersionExA
TlsAlloc
GetTickCount
QueryPerformanceCounter
Sleep
LoadLibraryW
SetHandleCount
EnterCriticalSection
HeapFree
WriteConsoleW
SetCurrentDirectoryA
InterlockedIncrement
GetCurrentThreadId
SetEndOfFile
GetConsoleMode
GlobalAlloc
SetUnhandledExceptionFilter
TerminateProcess
SetEnvironmentVariableA
MulDiv
CreateFileA
SetFileAttributesA
CreateThread
SetFilePointer
CreateMutexA
MultiByteToWideChar
LoadLibraryExW
UnhandledExceptionFilter
GetPrivateProfileStringA
LoadLibraryExA
GetModuleFileNameA
FlushFileBuffers
ExitProcess
IsDebuggerPresent
GetModuleFileNameW
InterlockedDecrement
SetLastError
FormatMessageA
TlsGetValue
FindClose
LoadResource
InitializeCriticalSection
LocalFree
FreeLibrary
GetFullPathNameA
GetStringTypeW
HeapReAlloc
GetSystemTimeAsFileTime
WriteFile
InterlockedExchange
GetStringTypeA
WideCharToMultiByte
GetTempPathA
GetLocaleInfoW
FreeEnvironmentStringsW
SetErrorMode
LocalAlloc
GetLocaleInfoA
GetStartupInfoW
GetCurrentProcess
DeleteCriticalSection
FreeEnvironmentStringsA
GetLocalTime
GetFileAttributesW
HeapDestroy
FindFirstFileW
WaitForSingleObject
GetFileAttributesA
FileTimeToSystemTime
ReleaseMutex
GetConsoleOutputCP
GetStdHandle
TlsSetValue
RtlUnwind
FatalAppExitA
IsBadWritePtr
SetConsoleCtrlHandler
IsValidLocale
EnumSystemLocalesA
GetUserDefaultLCID
GetTimeZoneInformation
CompareStringW
FindResourceA
GetCommandLineA
VirtualAlloc
GetOEMCP
ole32
CoTaskMemFree
CoCreateInstance
CoUninitialize
CoInitialize
advapi32
RegDeleteKeyA
RegCloseKey
OpenProcessToken
user32
GetSystemMetrics
MoveWindow
PostQuitMessage
IsWindow
DispatchMessageA
SetCursor
GetClientRect
SendMessageA
InvalidateRect
IsWindowVisible
GetSysColor
MessageBoxA
SetDlgItemTextA
EndDialog
SetForegroundWindow
GetDesktopWindow
TrackPopupMenu
LoadIconA
LoadCursorA
ClientToScreen
GetDlgItem
SetTimer
GetWindowLongA
SetWindowTextA
SetWindowLongA
PostMessageA
IsIconic
GetWindowRect
BeginPaint
PeekMessageA
SetFocus
EndPaint
FillRect
CreateWindowExA
GetSubMenu
EnableMenuItem
GetWindow
TranslateMessage
SetWindowPos
EnableWindow
SetCapture
ShowWindow
UpdateWindow
GetParent
DestroyWindow
GetActiveWindow
ScreenToClient
UnregisterClassA
ReleaseDC
GetCursorPos
GetDC
Sections
.text Size: 80KB - Virtual size: 77KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 312KB - Virtual size: 311KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ