?JUMP@@YAKKK@Z
Static task
static1
Behavioral task
behavioral1
Sample
9114209afbd0716cd3346603e3ff6cee5120c1f7455ef26b2d250cdebfacc5b0.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
9114209afbd0716cd3346603e3ff6cee5120c1f7455ef26b2d250cdebfacc5b0.exe
Resource
win10v2004-20221111-en
General
-
Target
9114209afbd0716cd3346603e3ff6cee5120c1f7455ef26b2d250cdebfacc5b0
-
Size
456KB
-
MD5
d79140b2a79be5918dfe2ba6de5a6804
-
SHA1
9db8418403d3ee90799872883144930b33b2caeb
-
SHA256
9114209afbd0716cd3346603e3ff6cee5120c1f7455ef26b2d250cdebfacc5b0
-
SHA512
15b27adfceb50e6cd057b9b04f46aa56c9cb6905a77a46ba50bfc323b9b8c5ca69d35d19220ec43b353862c917314cbbc20aed808cd1820e309eba49cd51c170
-
SSDEEP
12288:yL+Wyxj3C9YN2a4717H0zZ4M/7i2dykcS:0+WyVy9YMb71gWMDLdYS
Malware Config
Signatures
Files
-
9114209afbd0716cd3346603e3ff6cee5120c1f7455ef26b2d250cdebfacc5b0.exe windows x86
849e6b1ee1ec6518a7adc8ac0783383c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
InterlockedExchange
Sleep
GetProcAddress
GetModuleHandleA
GetSystemTime
LoadLibraryA
CloseHandle
ResumeThread
PulseEvent
VirtualFree
WriteFile
SetEvent
SetWaitableTimer
SignalObjectAndWait
GetTickCount
GetLastError
LCMapStringA
SetStdHandle
GetStringTypeW
GetStringTypeA
RaiseException
GetOEMCP
GetACP
GetCPInfo
MultiByteToWideChar
FlushFileBuffers
SetFilePointer
VirtualAlloc
HeapReAlloc
HeapAlloc
ReadFile
RtlUnwind
HeapFree
HeapCreate
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
DebugBreak
GetStdHandle
InterlockedDecrement
OutputDebugStringA
InterlockedIncrement
GetModuleFileNameA
IsBadWritePtr
IsBadReadPtr
HeapValidate
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
LCMapStringW
user32
EnableWindow
GetActiveWindow
SetFocus
EnumWindows
LoadBitmapA
SetActiveWindow
GetClientRect
SendMessageA
LoadStringA
ShowWindow
GetFocus
wininet
HttpOpenRequestA
winmm
mixerClose
waveInClose
joyGetThreshold
joySetCapture
Exports
Exports
Sections
.text Size: 60KB - Virtual size: 59KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 212KB - Virtual size: 215KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 168KB - Virtual size: 509KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ