Static task
static1
Behavioral task
behavioral1
Sample
9b7df943175dbec6acd7cd6a2df35bcc877a89249abc276ecfdd66fbeb21ee39.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9b7df943175dbec6acd7cd6a2df35bcc877a89249abc276ecfdd66fbeb21ee39.exe
Resource
win10v2004-20220812-en
General
-
Target
9b7df943175dbec6acd7cd6a2df35bcc877a89249abc276ecfdd66fbeb21ee39
-
Size
994KB
-
MD5
8474d612a66755b52ae3d4b686aa3048
-
SHA1
311a7f29699ed087b24926b5fd1d18dc29f3dae8
-
SHA256
9b7df943175dbec6acd7cd6a2df35bcc877a89249abc276ecfdd66fbeb21ee39
-
SHA512
a93b1e1ec241955ebec4afa17afb6c1f0e129652e3b930a0c007d9e041b6903e30568bb55c53842b5098b36181ca629d78200529c212e752845b7444512f7eff
-
SSDEEP
24576:GXsERakFgNoSkXjdF/WwmmzV+c2nYVo/AMrBFre/l4:3ETFp7/9JNA/jBc/l4
Malware Config
Signatures
Files
-
9b7df943175dbec6acd7cd6a2df35bcc877a89249abc276ecfdd66fbeb21ee39.exe windows x86
c0efea003d1665ea1b0c2c92a7fa5a64
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegConnectRegistryA
AdjustTokenPrivileges
OpenServiceA
SetKernelObjectSecurity
GetSidSubAuthorityCount
GetTokenInformation
GetSidSubAuthority
FreeSid
ControlService
kernel32
SizeofResource
SetStdHandle
GetEnvironmentStrings
GetACP
GetSystemTimeAsFileTime
InterlockedExchange
HeapReAlloc
GetOEMCP
GlobalUnlock
SetUnhandledExceptionFilter
GetTimeFormatA
IsValidLocale
ReadProcessMemory
TerminateProcess
gdi32
MoveToEx
SaveDC
CreateDIBSection
CreateCompatibleDC
DeleteDC
SelectObject
GetObjectA
GetTextMetricsA
RestoreDC
ole32
CoGetInterfaceAndReleaseStream
CoCreateFreeThreadedMarshaler
OleCreateEmbeddingHelper
CoIsHandlerConnected
CoTaskMemAlloc
CoFileTimeToDosDateTime
OleDuplicateData
OleSave
msvcrt
_wsplitpath
atoi
_controlfp
_vsnwprintf
ftell
__mb_cur_max
strstr
_wfopen
wcscmp
user32
LoadMenuA
SetClassLongA
FindWindowA
SetClipboardData
DialogBoxIndirectParamA
CheckMenuItem
GetCapture
KillTimer
GetWindow
TrackPopupMenu
Sections
.text Size: 47KB - Virtual size: 46KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 82KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 944B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ