Static task
static1
Behavioral task
behavioral1
Sample
9a2fff2dfe52d166e69df970833afeed9885bb45dd874100b2a86e7e74dc5d25.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9a2fff2dfe52d166e69df970833afeed9885bb45dd874100b2a86e7e74dc5d25.exe
Resource
win10v2004-20220901-en
General
-
Target
9a2fff2dfe52d166e69df970833afeed9885bb45dd874100b2a86e7e74dc5d25
-
Size
313KB
-
MD5
0fefe80722df38ca2c30f843abcef226
-
SHA1
4a163b993b4b29b6bdd456b12d4824607760882b
-
SHA256
9a2fff2dfe52d166e69df970833afeed9885bb45dd874100b2a86e7e74dc5d25
-
SHA512
8c9d2f49683cf3b854b01f12bbcc203ca0d3bc3839fa8766d41cd20d6fa25e4fed0f6aa55b111e35a22b9efa6c559c9aca7f774665ea3ae854754e8271df9902
-
SSDEEP
6144:+6X5bT4nDlOE1q+rplox5aC1mMEwC2SNUkf6o4DeV0SgGwwUTNwz9s8dG39cSI:+6J4nRhply4CojFm44De+Sg/wU3ru
Malware Config
Signatures
Files
-
9a2fff2dfe52d166e69df970833afeed9885bb45dd874100b2a86e7e74dc5d25.exe windows x86
4298522a4c0cdc5703f4b36c5a7f7f4e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
CreateToolbarEx
kernel32
GetNumberOfConsoleFonts
LocalAlloc
CreateFileA
UnmapViewOfFile
GetFileType
MapViewOfFile
DisableThreadLibraryCalls
GetFileSize
SetFilePointer
GetTickCount
GlobalSize
WriteFile
ExitProcess
lstrlenA
CloseHandle
CreateFileMappingA
GlobalAlloc
ReadFile
Sleep
LocalFree
GlobalFree
avifil32
AVIStreamSetFormat
AVIFileRelease
AVISaveOptions
AVIStreamRelease
AVIFileOpenA
AVIStreamInfoA
AVIFileCreateStreamA
AVIFileInit
AVIStreamGetFrameOpen
AVIStreamGetFrame
AVIFileGetStream
AVIStreamGetFrameClose
AVIMakeCompressedStream
AVIStreamWrite
user32
GetClientRect
SetCapture
DispatchMessageA
EndPaint
SetWindowTextA
PeekMessageA
SetFocus
SetCursor
SetWindowLongA
UpdateWindow
SubtractRect
ReleaseCapture
LoadIconA
GetWindowLongA
wvsprintfA
OffsetRect
LoadCursorA
InvalidateRect
IsWindow
GetClassLongA
TranslateMessage
GetKeyState
GetMessageA
BeginPaint
DefWindowProcA
DdeDisconnect
GetFocus
RegisterClassA
DestroyWindow
ShowWindow
GetWindowRect
CallWindowProcA
EnumWindowStationsW
wsprintfA
MessageBoxA
ScreenToClient
CreateWindowExA
MoveWindow
SendMessageA
gdi32
FillRgn
CreateRectRgn
SelectObject
DeleteObject
CreateDIBSection
GetStockObject
SetDIBitsToDevice
StretchBlt
CombineRgn
BitBlt
GetObjectA
StretchDIBits
GetCurrentObject
SetStretchBltMode
CreateCompatibleDC
DeleteDC
SetDIBColorTable
Sections
.text Size: 187KB - Virtual size: 187KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 117KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 5KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ