Static task
static1
Behavioral task
behavioral1
Sample
9ab8226db4ac9475df38946548544611a7fc2499f10d3616498974e607a13cd7.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
9ab8226db4ac9475df38946548544611a7fc2499f10d3616498974e607a13cd7.exe
Resource
win10v2004-20220901-en
General
-
Target
9ab8226db4ac9475df38946548544611a7fc2499f10d3616498974e607a13cd7
-
Size
189KB
-
MD5
391de479932ab5749c3665b72e91de10
-
SHA1
7cf0d5ad8dde352b662e19921db7352da446489d
-
SHA256
9ab8226db4ac9475df38946548544611a7fc2499f10d3616498974e607a13cd7
-
SHA512
c017009877dbd5aac14a28134787f6c6274acc559cc54599dfdfa1f9b2755ae4b0f92c4e6fbee5a915952b004d606dbd3e1d8562a695d9825e6c1aa2dafa2efe
-
SSDEEP
3072:l1KyMUzXfa49RkpzmiEtQhN1UiuOM7pCSeB0TuiqpEX:l1PzXfnkpS0XuQtB0Tute
Malware Config
Signatures
Files
-
9ab8226db4ac9475df38946548544611a7fc2499f10d3616498974e607a13cd7.exe windows x86
8f212f09e1246348717abcc5d1692adf
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
GetOEMCP
VirtualAlloc
GetStartupInfoA
lstrlenW
SetLastError
SetCurrentDirectoryW
RemoveDirectoryW
OutputDebugStringA
LocalFree
LocalAlloc
LoadLibraryW
LoadLibraryA
GlobalAlloc
GetWindowsDirectoryW
GetProcAddress
GetPrivateProfileIntW
GetModuleHandleW
GetModuleFileNameW
GetLastError
GetFileAttributesW
GetCurrentDirectoryW
FreeLibrary
FindClose
CreateProcessW
CreateFileW
user32
GetWindowLongW
GetWindowRect
GetWindowTextW
InflateRect
InvalidateRect
IsChild
IsDlgButtonChecked
IsRectEmpty
IsWindowEnabled
IsWindowVisible
LoadAcceleratorsW
GetWindow
LoadIconW
LoadImageW
LoadStringA
LoadStringW
MapWindowPoints
MessageBeep
MessageBoxW
MoveWindow
MsgWaitForMultipleObjects
OffsetRect
PeekMessageA
PeekMessageW
PostMessageW
PostQuitMessage
RedrawWindow
RegisterClassA
RegisterClassExW
RegisterClassW
ReleaseDC
SendDlgItemMessageW
SendMessageA
SendMessageW
SetCursor
SetFocus
SetForegroundWindow
SetMessageQueue
SetWindowLongW
SetWindowPos
SetWindowTextW
ShowWindow
TranslateAcceleratorW
TranslateMessage
UnregisterClassW
UpdateWindow
WaitMessage
wsprintfA
wsprintfW
GetUpdateRect
GetSystemMetrics
GetSysColorBrush
GetSysColor
GetShellWindow
GetParent
GetNextDlgTabItem
GetMessageW
GetLastActivePopup
GetForegroundWindow
GetFocus
GetDlgItem
GetDlgCtrlID
GetDesktopWindow
GetDC
GetClientRect
GetClassNameA
GetClassInfoW
FindWindowW
FillRect
ExitWindowsEx
EnumThreadWindows
EnumChildWindows
EndPaint
EndDialog
EnableWindow
DrawTextW
DrawIcon
DrawFocusRect
DrawEdge
DispatchMessageW
DispatchMessageA
DialogBoxParamW
DestroyWindow
DefWindowProcW
DefWindowProcA
CreateWindowExW
CreateWindowExA
CreateMenu
CreateDialogParamW
CopyRect
CheckRadioButton
CheckDlgButton
CharPrevW
CharNextW
CallWindowProcW
BringWindowToTop
BeginPaint
LoadCursorW
gdi32
PlayEnhMetaFile
DeleteEnhMetaFile
StretchBlt
SetTextColor
SetMapMode
SetBkMode
SetBkColor
SelectObject
GetTextMetricsW
BitBlt
GetObjectW
CreateBitmap
CreateCompatibleBitmap
CreateCompatibleDC
CreateFontIndirectW
DPtoLP
DeleteDC
DeleteObject
GetDeviceCaps
GetMapMode
GetStockObject
advapi32
OpenProcessToken
RegSetValueExW
RegQueryValueW
RegQueryValueExW
RegQueryValueExA
RegOpenKeyW
RegOpenKeyExW
RegOpenKeyExA
RegDeleteValueW
RegCreateKeyW
RegCreateKeyExW
AdjustTokenPrivileges
LookupPrivilegeValueW
RegCloseKey
shell32
Shell_NotifyIconA
shlwapi
PathFindFileNameA
PathQuoteSpacesA
PathRemoveFileSpecA
PathAppendA
SHRegGetBoolUSValueA
StrCpyNW
StrStrIA
wnsprintfA
SHGetValueA
msvcrt
_except_handler3
_vsnwprintf
_wmakepath
_wsplitpath
_wtoi
free
malloc
memmove
setlocale
swscanf
Sections
.text Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 157KB - Virtual size: 156KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ