Static task
static1
Behavioral task
behavioral1
Sample
9ab9fc0fef54c376ea02a02a7004f9b76f7b197a128f65b8c4902c435c34a043.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9ab9fc0fef54c376ea02a02a7004f9b76f7b197a128f65b8c4902c435c34a043.exe
Resource
win10v2004-20221111-en
General
-
Target
9ab9fc0fef54c376ea02a02a7004f9b76f7b197a128f65b8c4902c435c34a043
-
Size
48KB
-
MD5
3d6e8fc670a59fe5f339276c89c420b7
-
SHA1
1c65fdd604522d52b3c2360b6c77fd268d3f1d35
-
SHA256
9ab9fc0fef54c376ea02a02a7004f9b76f7b197a128f65b8c4902c435c34a043
-
SHA512
dbfec34cb898b9bef1947731e286c0fc445aaddce88632a28c18ed81ef06822f972659a81084fec896eaaa6e5955fc0dc4a3f6edc67a5b1a17ebad2f6bf63123
-
SSDEEP
768:K1Vrc+hE0IxN9GTcKrvTx6q/yyXoElxig:x0cNITcKrvEqRBl
Malware Config
Signatures
Files
-
9ab9fc0fef54c376ea02a02a7004f9b76f7b197a128f65b8c4902c435c34a043.exe windows x86
57e38e2ce0baaabeda56120fdb82b6ab
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcatA
lstrlenA
MoveFileExA
GetSystemDirectoryA
lstrcpyA
GetWindowsDirectoryA
FreeLibrary
GetProcAddress
LoadLibraryA
LCMapStringW
LCMapStringA
CreateFileA
SetEndOfFile
SetFilePointer
GetOEMCP
GetACP
GetCPInfo
ReadFile
FlushFileBuffers
SetStdHandle
HeapReAlloc
VirtualAlloc
HeapAlloc
WriteFile
RtlUnwind
VirtualFree
HeapCreate
HeapDestroy
CloseHandle
GetLastError
GetStringTypeW
GetStringTypeA
MultiByteToWideChar
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapFree
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
user32
MessageBoxA
SendMessageA
GetWindowRect
MoveWindow
DefWindowProcA
DestroyWindow
PostQuitMessage
CreateWindowExA
ShowWindow
UpdateWindow
DialogBoxParamA
PostMessageA
LoadIconA
LoadCursorA
RegisterClassExA
LoadStringA
GetMessageA
TranslateMessage
DispatchMessageA
gdi32
GetStockObject
advapi32
RegSetValueExA
RegOpenKeyA
RegCloseKey
Sections
.text Size: 24KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ