Static task
static1
Behavioral task
behavioral1
Sample
a9472c993662d27175bdf5de1a8781ea334fcbbf30fbe4d156e50520d82cddac.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a9472c993662d27175bdf5de1a8781ea334fcbbf30fbe4d156e50520d82cddac.exe
Resource
win10v2004-20221111-en
General
-
Target
a9472c993662d27175bdf5de1a8781ea334fcbbf30fbe4d156e50520d82cddac
-
Size
176KB
-
MD5
b43a97a772d7b4dcd7c7a1b77838e55b
-
SHA1
a457bc831625ce148ab7dfd50d7da2284985620a
-
SHA256
a9472c993662d27175bdf5de1a8781ea334fcbbf30fbe4d156e50520d82cddac
-
SHA512
d93c91d005bf9ebc838db319629e7d39608902e75b3e736064643239ba89ad09ce41b0c1c36739ddce1d4e5caea3cde10006709fd01da71dd87e48d1e08119e0
-
SSDEEP
3072:Wi8Qxn0xeQ2UZzt+R+uIWPUEcHDuFxo9V6PKGUARz8Poi0Lt7:Wi8QYLztUZIMkDuFxoRMYx+7
Malware Config
Signatures
Files
-
a9472c993662d27175bdf5de1a8781ea334fcbbf30fbe4d156e50520d82cddac.exe windows x86
9eb7d0a407291aece35525e48f0e25f0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
SetFilePointer
SystemTimeToFileTime
GetFileAttributesA
LocalFileTimeToFileTime
CreateDirectoryA
SetFileTime
SetStdHandle
LoadLibraryA
GetLastError
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
IsBadCodePtr
IsBadReadPtr
GetFileType
GetStdHandle
SetHandleCount
GetPrivateProfileStringA
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetOEMCP
GetACP
GetCPInfo
IsBadWritePtr
HeapReAlloc
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
SetUnhandledExceptionFilter
GetProcAddress
GetVersion
GetCommandLineA
GetStartupInfoA
HeapFree
HeapAlloc
RaiseException
RtlUnwind
GetFileSize
FlushFileBuffers
GetCurrentDirectoryA
FindFirstFileA
lstrcpynA
FindNextFileA
FindClose
DeleteFileA
GetSystemDirectoryA
lstrcatA
lstrcpyA
GetLocalTime
CreateThread
WriteFile
ReadFile
GetModuleHandleA
OpenMutexA
CreateMutexA
GetTickCount
GetModuleFileNameA
lstrlenA
CreateFileA
CloseHandle
SetCurrentDirectoryA
ExitProcess
GetEnvironmentStringsW
Sleep
user32
SetTimer
TranslateMessage
LoadIconA
DestroyMenu
DispatchMessageA
SetWindowPos
GetMessageA
ShowCaret
TrackPopupMenu
InsertMenuItemA
CreatePopupMenu
CreateMenu
GetDC
ReleaseDC
GetCaretPos
HideCaret
OpenClipboard
GetClipboardData
CloseClipboard
DestroyCaret
SetCaretPos
GetClientRect
DrawTextA
SetRect
FillRect
GetCursorPos
ShowWindow
PostQuitMessage
DefWindowProcA
MoveWindow
SetCapture
ReleaseCapture
LoadCursorA
RegisterClassExA
CreateWindowExA
MessageBoxA
wsprintfA
GetDesktopWindow
GetWindowRect
wininet
InternetReadFile
InternetOpenUrlA
InternetOpenA
InternetCloseHandle
winmm
PlaySoundA
gdi32
GetTextExtentPoint32A
CreateFontA
SetTextColor
CreateSolidBrush
CreateCompatibleDC
SelectObject
BitBlt
DeleteDC
SetBkMode
SetBkColor
CreateDIBitmap
CreateCompatibleBitmap
DeleteObject
advapi32
RegEnumKeyExA
RegCreateKeyExA
RegQueryValueExA
RegSetValueExA
RegCloseKey
RegOpenKeyExA
shell32
Shell_NotifyIconA
ShellExecuteA
Sections
.text Size: 88KB - Virtual size: 86KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 28KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 48KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ