Static task
static1
Behavioral task
behavioral1
Sample
d9d35c2d2352b085344617acaf9fe27a4b3a28d457287a4a26d86b792e967caf.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d9d35c2d2352b085344617acaf9fe27a4b3a28d457287a4a26d86b792e967caf.exe
Resource
win10v2004-20220812-en
General
-
Target
d9d35c2d2352b085344617acaf9fe27a4b3a28d457287a4a26d86b792e967caf
-
Size
120KB
-
MD5
f47c974bfd14926777b66e77f79b65a8
-
SHA1
0840fe85cc6067019599b16b86dcc4538645e8f9
-
SHA256
d9d35c2d2352b085344617acaf9fe27a4b3a28d457287a4a26d86b792e967caf
-
SHA512
3fa16ba4e89086e00ae2893868c62050231def6bd9bbc682414cfe7d51153b611bd10f00ad78f54353d9916c0ee0c311df9b5fd05a20c06880ddfa15ae59116d
-
SSDEEP
1536:yFWHKNMUz0DplZvo3Ma/80PKZPGMRsSNj/ahp6cxPvTBAb5wUZ7x:ww1lxov80yndRc1TBAb5wUZt
Malware Config
Signatures
Files
-
d9d35c2d2352b085344617acaf9fe27a4b3a28d457287a4a26d86b792e967caf.exe windows x86
67feada1772af2f0a2117b9098de48d5
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateThread
GlobalAlloc
GlobalFree
GetFileSize
ReadFile
GetModuleFileNameW
CloseHandle
GetLocaleInfoW
lstrlenA
WriteFile
WideCharToMultiByte
lstrcpynW
CreateFileW
lstrlenW
lstrcatW
lstrcpyW
lstrcmpA
lstrcpynA
CreateProcessW
GetTickCount
MultiByteToWideChar
FlushFileBuffers
SetFilePointer
SystemTimeToFileTime
SetFileTime
GetFileAttributesW
GetCurrentDirectoryW
LocalFileTimeToFileTime
FindFirstFileW
FreeLibrary
MoveFileExW
SetEvent
GetModuleHandleW
LoadLibraryW
GetProcAddress
ResetEvent
CreateEventW
FindNextFileW
GetCurrentProcessId
InitializeCriticalSection
GetSystemDirectoryW
LeaveCriticalSection
EnterCriticalSection
ExitThread
GetComputerNameA
HeapAlloc
HeapFree
VirtualFree
VirtualAlloc
LoadLibraryA
GetModuleHandleA
WaitForSingleObject
SetWaitableTimer
CancelWaitableTimer
CreateWaitableTimerW
VirtualQuery
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetLocaleInfoA
HeapSize
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
InitializeCriticalSectionAndSpinCount
RaiseException
IsDebuggerPresent
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
QueryPerformanceCounter
FindClose
Sleep
CreateMutexW
ExitProcess
DeleteFileW
GetTempPathW
CreateDirectoryW
InterlockedDecrement
GetCurrentThreadId
SetLastError
InterlockedIncrement
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetModuleFileNameA
GetStdHandle
SetUnhandledExceptionFilter
HeapCreate
GetSystemTime
GetTempFileNameW
GetLastError
HeapReAlloc
GetCommandLineA
GetStartupInfoA
DeleteCriticalSection
user32
SetWindowLongW
GetWindowLongW
ShowWindow
CreateWindowExW
LoadCursorW
EnumWindows
SetSysColors
LoadIconW
SystemParametersInfoW
RegisterClassW
EnableWindow
DefWindowProcW
GetWindowThreadProcessId
DestroyWindow
GetMessageW
TranslateMessage
SetWindowPos
IsWindow
GetSystemMetrics
SendMessageW
DispatchMessageW
wsprintfA
ExitWindowsEx
wsprintfW
GetClientRect
gdi32
GetStockObject
advapi32
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
shell32
SHGetFolderPathW
ShellExecuteW
ole32
CoCreateInstance
CoInitializeEx
OleInitialize
CoGetClassObject
OleSetContainedObject
oleaut32
VariantClear
VariantInit
SysAllocString
ntdll
RtlUnwind
avicap32
capCreateCaptureWindowW
Sections
.text Size: 73KB - Virtual size: 73KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ