Static task
static1
Behavioral task
behavioral1
Sample
9a78902e1e30af63e3ae0323fa3f2e864115b1c3977da5bf4d7af1ddeb204c46.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9a78902e1e30af63e3ae0323fa3f2e864115b1c3977da5bf4d7af1ddeb204c46.exe
Resource
win10v2004-20220901-en
General
-
Target
9a78902e1e30af63e3ae0323fa3f2e864115b1c3977da5bf4d7af1ddeb204c46
-
Size
332KB
-
MD5
065722e0626db7162d5971c6933127c2
-
SHA1
6237db5179c4016636e75a1915f2358d64b12516
-
SHA256
9a78902e1e30af63e3ae0323fa3f2e864115b1c3977da5bf4d7af1ddeb204c46
-
SHA512
cfa5cf40e7f6be8f16e5407f6f8575fae2d59f21067858bf77d68a02081386b5654338be6e5f16114035d0c059fdc35c260cc8e283f56a30074e03347bd24741
-
SSDEEP
6144:aYh2uBGKtVdIwZTBrt1l8/U73vSlglwnOYkESLluCx7NqDi34mHAF8jSUXKE:nzEKz/BLnvernOYkESLlrID8BSU6E
Malware Config
Signatures
Files
-
9a78902e1e30af63e3ae0323fa3f2e864115b1c3977da5bf4d7af1ddeb204c46.exe windows x86
ca394bf2085c114d5d732c0148c66a2f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
advapi32
RegCreateKeyExA
RegOpenKeyExA
RegDeleteKeyA
RegEnumKeyA
RegCloseKey
RegDeleteValueA
RegSetValueExA
RegEnumValueA
RegQueryValueExA
gdi32
CreateFontIndirectA
CreateBrushIndirect
SetBkMode
SelectObject
GetDeviceCaps
SetTextColor
DeleteObject
SetBkColor
version
VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA
kernel32
GetWindowsDirectoryA
SetCurrentDirectoryA
CopyFileA
WritePrivateProfileStringA
lstrlenA
CloseHandle
CreateThread
MoveFileA
GetProcessHandleCount
MultiByteToWideChar
GetShortPathNameA
WriteFile
FindClose
CreateFileA
ClearCommBreak
GetCommandLineA
lstrcmpiA
GetModuleFileNameA
GetVersion
CreateProcessA
GetModuleHandleA
CreateDirectoryA
GetDiskFreeSpaceA
SetErrorMode
SetFilePointer
GetCurrentProcess
ReadFile
lstrcatA
DeleteFileA
GetExitCodeProcess
GetFileSize
GlobalLock
lstrcpynA
FindNextFileA
GetProcAddress
WaitForSingleObject
LoadLibraryExA
ExitProcess
GetLastError
ExpandEnvironmentStringsA
FreeLibrary
GetTickCount
GetPrivateProfileStringA
FindFirstFileA
SetFileTime
SetFileAttributesA
GlobalAlloc
lstrcmpA
RemoveDirectoryA
SearchPathA
GlobalUnlock
MulDiv
GetTempFileNameA
GlobalFree
GetFullPathNameA
GetTempPathA
LoadLibraryA
Sleep
GetSystemDirectoryA
GetFileAttributesA
CompareFileTime
shell32
SHGetSpecialFolderLocation
ShellExecuteA
SHBrowseForFolderA
SHFileOperationA
SHGetFileInfoA
SHGetPathFromIDListA
comctl32
ImageList_Create
ImageList_Destroy
ImageList_AddMasked
ole32
CoCreateInstance
OleUninitialize
OleInitialize
CoTaskMemFree
user32
CheckDlgButton
CharNextA
GetSystemMetrics
GetSysColor
SetWindowTextA
SystemParametersInfoA
SetCursor
EnableWindow
SetClassLongA
GetDlgItem
DialogBoxParamA
LoadImageA
GetDlgItemTextA
SendMessageA
PostQuitMessage
CreatePopupMenu
DrawTextA
SetForegroundWindow
CharPrevA
AppendMenuA
ExitWindowsEx
GetDC
InvalidateRect
FillRect
SetClipboardData
GetSystemMenu
EndPaint
TrackPopupMenu
GetClientRect
CallWindowProcA
DispatchMessageA
RegisterClassA
EmptyClipboard
PeekMessageA
LoadCursorA
SendMessageTimeoutA
SetTimer
IsWindowVisible
SetWindowLongA
SetDlgItemTextA
EnumWindowStationsA
wsprintfA
CloseClipboard
CreateWindowExA
BeginPaint
ShowWindow
GetClassInfoA
GetWindowRect
OpenClipboard
ScreenToClient
GetWindowLongA
MessageBoxIndirectA
DestroyWindow
EnableMenuItem
SetWindowPos
GetMessagePos
FindWindowExA
IsWindow
LoadBitmapA
DefWindowProcA
IsWindowEnabled
CreateDialogParamA
EndDialog
Sections
.text Size: 197KB - Virtual size: 197KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 124KB - Virtual size: 123KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 5KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ