Static task
static1
Behavioral task
behavioral1
Sample
9ac3599da5e640bcb8c4fafceef0f2979b08c49acb27c4a34b9481393cb41cfa.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9ac3599da5e640bcb8c4fafceef0f2979b08c49acb27c4a34b9481393cb41cfa.exe
Resource
win10v2004-20220901-en
General
-
Target
9ac3599da5e640bcb8c4fafceef0f2979b08c49acb27c4a34b9481393cb41cfa
-
Size
276KB
-
MD5
7e472a7e43397fa34b74ec00bb6f824e
-
SHA1
a2fe5559b0a0aee4beb4059eb0c43165f5e10e20
-
SHA256
9ac3599da5e640bcb8c4fafceef0f2979b08c49acb27c4a34b9481393cb41cfa
-
SHA512
c30b2ade2a217eb43066d8845b97d5468f1bb820016f50dd9385e624650ca03a0ce41b5aa9824072bbff3e6cc804ef866145d8761e78e069ce0f9d783c35ea2c
-
SSDEEP
6144:DL4KTOJ9sS1os827rIQReZUlOY2ZQEc2BF3ef6GkS32gM:DMK695PVRgrvZv5gWS32g
Malware Config
Signatures
Files
-
9ac3599da5e640bcb8c4fafceef0f2979b08c49acb27c4a34b9481393cb41cfa.exe windows x86
8ebe3eb2348c23d131a7918d4347f2da
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
setupapi
SetupDiGetClassDevsA
SetupDiGetDeviceRegistryPropertyA
SetupCopyOEMInfA
SetupDiSetDeviceRegistryPropertyA
SetupDiGetDeviceInfoListDetailA
SetupDiDestroyDeviceInfoList
SetupDiCreateDeviceInfoListExA
SetupDiEnumDeviceInfo
SetupDiOpenDeviceInfoA
comctl32
ord17
winspool.drv
ClosePrinter
OpenPrinterA
kernel32
InitializeCriticalSection
SetHandleCount
UnhandledExceptionFilter
lstrcmpiA
SetFilePointer
TerminateProcess
RaiseException
ExitProcess
GlobalHandle
HeapCreate
VirtualFree
LeaveCriticalSection
GetCommandLineA
GlobalGetAtomNameA
RtlUnwind
LocalReAlloc
FreeLibrary
InterlockedDecrement
CloseHandle
FreeEnvironmentStringsW
DeleteCriticalSection
HeapFree
GetStringTypeA
SetLastError
WriteFile
lstrcatA
GetEnvironmentStringsA
GlobalAlloc
GetProcAddress
EnterCriticalSection
lstrlenA
TlsGetValue
GlobalUnlock
MultiByteToWideChar
GetOEMCP
IsBadCodePtr
SetUnhandledExceptionFilter
HeapReAlloc
HeapDestroy
GetLocaleInfoA
GlobalLock
GlobalReAlloc
GetACP
GetVersion
lstrcpynA
GlobalFree
InterlockedIncrement
GlobalFindAtomA
VirtualAlloc
GetModuleFileNameA
lstrcmpA
HeapSize
LocalAlloc
IsBadWritePtr
GetEnvironmentStringsW
lstrcpyA
HeapAlloc
GetFileType
LCMapStringW
GlobalFlags
TlsSetValue
LoadLibraryA
GetLastError
GetCurrentProcess
GlobalDeleteAtom
GetCurrentThreadId
FreeEnvironmentStringsA
LCMapStringA
GetStartupInfoA
GetModuleHandleA
LocalFree
GetCPInfo
GetStringTypeW
GlobalAddAtomA
TlsAlloc
IsBadReadPtr
WideCharToMultiByte
FlushFileBuffers
gdi32
PtVisible
GetClipBox
SetViewportExtEx
RectVisible
DeleteObject
OffsetViewportOrgEx
SaveDC
SetBkColor
SetWindowExtEx
ScaleViewportExtEx
ScaleWindowExtEx
RestoreDC
ExtTextOutA
GetStockObject
SetViewportOrgEx
SetTextColor
TextOutA
GetObjectA
GetDeviceCaps
SelectObject
user32
GetPropA
GetFocus
ModifyMenuA
SetMenuItemBitmaps
SendMessageA
DestroyWindow
GetClassNameA
RegisterClassA
GetMenuItemID
GetWindowRect
GetMessagePos
SetWindowPos
GetWindow
CopyRect
LoadStringA
PostMessageA
GetTopWindow
CreateWindowExA
MessageBoxA
GetClassLongA
SetWindowTextA
GetClientRect
PostQuitMessage
DefWindowProcA
SetPropA
GetForegroundWindow
CallWindowProcA
CharNextA
GetCapture
IsIconic
GetSysColor
ReleaseDC
SystemParametersInfoA
DispatchMessageA
SetForegroundWindow
LoadCursorA
GetMessageTime
EnableWindow
GetDlgCtrlID
PeekMessageA
GetWindowPlacement
GetSubMenu
GetParent
RemovePropA
GetLastActivePopup
GetSysColorBrush
GetMenu
GetMenuItemCount
LoadBitmapA
TabbedTextOutA
GetDC
GetWindowLongA
GetWindowTextA
WinHelpA
CheckMenuItem
EnableMenuItem
IsWindowEnabled
GrayStringA
GetKeyState
wsprintfA
MapWindowPoints
DestroyMenu
PtInRect
RegisterWindowMessageA
GetMenuState
LoadIconA
GetSystemMetrics
DrawTextA
GetClassInfoA
GetNextDlgTabItem
SetWindowLongA
GetDlgItem
Sections
.text Size: 184KB - Virtual size: 183KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 20KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 52KB - Virtual size: 50KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ