Static task
static1
Behavioral task
behavioral1
Sample
9783ed70680a6154ce03c0f0c585fb2756153b9e0ba1b762b5e169d073fa5c76.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
9783ed70680a6154ce03c0f0c585fb2756153b9e0ba1b762b5e169d073fa5c76.exe
Resource
win10v2004-20220812-en
General
-
Target
9783ed70680a6154ce03c0f0c585fb2756153b9e0ba1b762b5e169d073fa5c76
-
Size
99KB
-
MD5
7cfc9d6db56f3d974c3f78d540baacf5
-
SHA1
465d5438f002a7b1f4b392e1bd7110c88ab252df
-
SHA256
9783ed70680a6154ce03c0f0c585fb2756153b9e0ba1b762b5e169d073fa5c76
-
SHA512
72a22ad01d6c81d0e677c9161b8701261c00901751cb938a7f6403369c870e20643b5e021491067aea439e2821bb5a310327fe870459a6e525806fc929089e6f
-
SSDEEP
768:L58ktnqVLKEtkElPAnZikuOLnYLn3lIdYZY7PIOUnToIf1y5wm:iVVTkkAn5ZLYL32dYZYTIOUnToIf8w
Malware Config
Signatures
Files
-
9783ed70680a6154ce03c0f0c585fb2756153b9e0ba1b762b5e169d073fa5c76.exe windows x86
c6deab05731bc7811b2855b459a00165
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
SetDlgItemTextA
SendMessageA
SendDlgItemMessageA
LoadIconA
GetDlgItem
EndDialog
DialogBoxParamA
CharLowerA
wsprintfA
kernel32
HeapFree
HeapCreate
HeapDestroy
HeapAlloc
HeapReAlloc
MultiByteToWideChar
lstrlenA
CloseHandle
ContinueDebugEvent
CreateFileA
CreateMutexA
CreateProcessA
CreateThread
CreateToolhelp32Snapshot
DebugActiveProcessStop
DeleteFileA
ExitProcess
ExitThread
FreeLibrary
GetFileSize
GetLastError
GetModuleHandleA
GetProcAddress
GetStartupInfoA
GetThreadContext
GetThreadSelectorEntry
IsBadReadPtr
LoadLibraryA
LocalAlloc
LocalFree
Module32First
Module32Next
OpenThread
ReadFile
ReadProcessMemory
RtlMoveMemory
RtlZeroMemory
SetThreadContext
TerminateProcess
VirtualAlloc
VirtualFree
VirtualProtectEx
VirtualQueryEx
WaitForDebugEvent
WriteFile
WriteProcessMemory
lstrcatA
lstrcmpA
lstrcpyA
comctl32
InitCommonControls
shell32
DragQueryFileA
ShellExecuteA
DragAcceptFiles
ole32
CoInitialize
CoUninitialize
CoCreateInstance
Sections
.text Size: 35KB - Virtual size: 35KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 47KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ