Static task
static1
Behavioral task
behavioral1
Sample
9bf5cab8f1514de2a5ca2ce0403a1f0a3ad94e45073d62eb55980b917a9b0511.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9bf5cab8f1514de2a5ca2ce0403a1f0a3ad94e45073d62eb55980b917a9b0511.exe
Resource
win10v2004-20221111-en
General
-
Target
9bf5cab8f1514de2a5ca2ce0403a1f0a3ad94e45073d62eb55980b917a9b0511
-
Size
293KB
-
MD5
dbe427022b5a5436d57af0da953afc54
-
SHA1
265e4d184945416907ae20fef0a71b203bdd0771
-
SHA256
9bf5cab8f1514de2a5ca2ce0403a1f0a3ad94e45073d62eb55980b917a9b0511
-
SHA512
77e68842235a34726365af225ffdde243b7472db9eab9773e15e7686bbaa3097cfb7939a33863a938a1d2d629df598f29ffcdfb095323ff2c3894b63c435c217
-
SSDEEP
6144:jlIF2M80FfpCk1miMm/weYzynJlpAqDjnPIDd1fHWVRyA0CoPd:jlK230FfmxWweYaJoq/APHWVZ0Pd
Malware Config
Signatures
Files
-
9bf5cab8f1514de2a5ca2ce0403a1f0a3ad94e45073d62eb55980b917a9b0511.exe windows x86
d3d90f0936e5019ce459fae651e906a8
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ntdll
atoi
memmove
_ftol
user32
PostMessageW
LoadStringA
IsWindow
TranslateMessage
DispatchMessageW
BeginPaint
EndPaint
DefWindowProcW
SetTimer
GetClipboardData
KillTimer
MsgWaitForMultipleObjects
SetWindowLongW
SendMessageW
EqualRect
ClientToScreen
MessageBeep
wvsprintfW
GetMessageW
PeekMessageW
SetCursor
GetDC
GetClientRect
SetRect
UpdateWindow
LoadCursorW
GetClassInfoW
wsprintfW
GetWindowLongW
GetParent
CreateWindowExW
LoadStringW
CloseClipboard
SetClipboardData
EmptyClipboard
RegisterClassW
OpenClipboard
InvalidateRect
ReleaseDC
wsprintfA
GetAsyncKeyState
MessageBoxW
kernel32
GetModuleHandleA
IsBadStringPtrW
LoadLibraryA
DeleteFileW
IsBadWritePtr
IsBadCodePtr
lstrcmpiW
LocalUnlock
GetPrivateProfileStringW
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetProcAddress
lstrcatA
GetModuleHandleW
DeleteCriticalSection
GetACP
IsBadHugeReadPtr
GetFileAttributesW
HeapFree
GetProcessHeap
HeapAlloc
GlobalFree
GlobalUnlock
lstrcpyW
GlobalLock
GlobalAlloc
lstrlenW
lstrcpynW
LocalFree
WideCharToMultiByte
LocalAlloc
GetModuleFileNameW
lstrcatW
LocalHandle
MultiByteToWideChar
LocalLock
lstrlenA
DisableThreadLibraryCalls
QueryPerformanceCounter
MulDiv
QueryPerformanceFrequency
Sleep
GetVersionExW
GetSystemInfo
VirtualAlloc
VirtualFree
GlobalMemoryStatusEx
GlobalHandle
SetEvent
FreeLibrary
CloseHandle
GlobalReAlloc
lstrcpyA
WaitForSingleObject
SetThreadPriority
GetThreadPriority
GetCurrentThread
GetLocalTime
CreateEventW
CreateThread
GetFileSize
GetOverlappedResult
GetLastError
WriteFile
SetFilePointer
CreateFileW
GetDiskFreeSpaceW
LoadLibraryW
GetCurrentThreadId
gdi32
DeleteObject
CreatePalette
GetStockObject
GetDCOrgEx
SelectObject
PatBlt
GetObjectW
GetPaletteEntries
GetNearestPaletteIndex
SetWindowOrgEx
RealizePalette
SelectPalette
GetClipBox
GetDeviceCaps
GetSystemPaletteEntries
winmm
SendDriverMessage
OpenDriver
CloseDriver
mmioDescend
mmioRead
mciSendStringW
mmioAscend
mmioOpenW
mmioClose
mmioWrite
waveInStart
waveInStop
waveOutGetNumDevs
mmioCreateChunk
mmioFlush
waveInReset
waveInUnprepareHeader
waveInClose
waveInOpen
waveInPrepareHeader
waveInAddBuffer
timeGetTime
mmioSeek
advapi32
RegEnumKeyW
RegOpenKeyW
RegCloseKey
RegQueryValueExW
RegOpenKeyA
RegQueryValueExA
RegCreateKeyW
version
GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW
msvfw32
ICSeqCompressFrame
ICSeqCompressFrameEnd
DrawDibDraw
ICSeqCompressFrameStart
DrawDibGetPalette
DrawDibBegin
ICImageDecompress
DrawDibOpen
ICCompressorFree
DrawDibClose
ICCompressorChoose
DrawDibRealize
Sections
.text Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 244KB - Virtual size: 413KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ