Static task
static1
Behavioral task
behavioral1
Sample
9ee5565f1e08fab9ef32ac2b5441e8022f8bf90a95e7857c58aafeae8102dc26.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
9ee5565f1e08fab9ef32ac2b5441e8022f8bf90a95e7857c58aafeae8102dc26.exe
Resource
win10v2004-20221111-en
General
-
Target
9ee5565f1e08fab9ef32ac2b5441e8022f8bf90a95e7857c58aafeae8102dc26
-
Size
280KB
-
MD5
8cc16d417075a83b813f21b2717fce9e
-
SHA1
05f244b89f2a73564907995e0a65209def301f67
-
SHA256
9ee5565f1e08fab9ef32ac2b5441e8022f8bf90a95e7857c58aafeae8102dc26
-
SHA512
904887f22c3e10d3366226fb3a4625c959a53c75d583a89727459c5cbc68b6e0678de4ea2b09b8ebb93ce9cf7b64aa816ad28ceaa91a42bdf45ed63a34f9edb3
-
SSDEEP
6144:SICChu7fGqDFSl0ZcLzuiazoOemU9dWB7bc+:SxCh8Gq5SAGzEzoOdUM3B
Malware Config
Signatures
Files
-
9ee5565f1e08fab9ef32ac2b5441e8022f8bf90a95e7857c58aafeae8102dc26.exe windows x86
0a28e1a0399fc217ad70829705aad68e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ole32
CoIsOle1Class
PropVariantClear
StringFromIID
CoRegisterMessageFilter
StringFromCLSID
CoTreatAsClass
kernel32
GetNumberFormatW
SetPriorityClass
_lclose
EnumCalendarInfoA
GetUserDefaultLangID
lstrcmpiA
MoveFileExA
CreateEventA
GetProcessTimes
GetFileInformationByHandle
GetCurrentThread
IsValidLocale
CreateMutexW
GetStringTypeExW
FileTimeToDosDateTime
SetCurrentDirectoryW
GetCurrentDirectoryA
LoadLibraryA
CreateMutexA
FileTimeToSystemTime
VirtualQueryEx
GetStartupInfoA
GetUserGeoID
SetFileTime
ConvertDefaultLocale
GetModuleHandleW
IsProcessorFeaturePresent
lstrlenA
LCMapStringW
GetSystemPowerStatus
GetProfileStringA
LeaveCriticalSection
RemoveDirectoryA
LockFile
SuspendThread
GetFileType
CompareFileTime
EnumSystemLocalesA
GetDateFormatA
GetDriveTypeA
lstrcatA
FindResourceExW
GetPrivateProfileIntW
FreeLibrary
CreateFileW
HeapSize
GetFileSize
SetEndOfFile
LocalUnlock
GetCurrentProcessId
MapViewOfFileEx
GetPrivateProfileStringA
LocalFileTimeToFileTime
SystemTimeToTzSpecificLocalTime
GetLogicalDrives
ExpandEnvironmentStringsW
GetModuleHandleA
GetCommandLineA
GetVersion
ExitProcess
GetProcAddress
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
GetLastError
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
GlobalAlloc
InterlockedDecrement
InterlockedIncrement
InitializeCriticalSection
EnterCriticalSection
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
HeapReAlloc
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
LCMapStringA
GetFileTime
SwitchToThread
SizeofResource
GetSystemDefaultLCID
SetFileAttributesW
GetSystemWindowsDirectoryW
QueryDosDeviceA
GetSystemDefaultUILanguage
SetCurrentDirectoryA
OutputDebugStringA
GlobalFree
GetTimeZoneInformation
GetEnvironmentStrings
FindNextChangeNotification
FlushFileBuffers
lstrlenW
SearchPathW
MoveFileW
_llseek
DeleteTimerQueueTimer
QueryPerformanceCounter
FindResourceW
FindClose
GetExitCodeThread
VirtualAlloc
CreateFileA
WriteFile
advapi32
RegEnumKeyW
RegCreateKeyA
GetSecurityDescriptorOwner
RegSetKeySecurity
CheckTokenMembership
GetSidLengthRequired
shell32
SHGetMalloc
SHGetFolderPathAndSubDirW
SHGetDesktopFolder
oleaut32
SysStringLen
shlwapi
PathGetCharTypeW
StrRetToStrW
PathFileExistsA
comctl32
ImageList_GetIconSize
PropertySheetW
ImageList_LoadImageW
ImageList_Create
ord17
user32
BeginPaint
ModifyMenuA
GetClassNameA
GetKeyboardType
GetAsyncKeyState
IsWindowEnabled
GetClipboardData
IsCharAlphaA
GetNextDlgTabItem
DdeCreateDataHandle
ClipCursor
ValidateRgn
GetCapture
SetMenuItemInfoA
CopyIcon
OpenClipboard
SetWindowPlacement
GetClassNameW
DdeFreeStringHandle
SetCursor
ReleaseDC
DrawIconEx
EnumChildWindows
SetTimer
CreateDialogIndirectParamW
GetMenuItemID
MapDialogRect
GetInputState
SetDlgItemInt
GetMenuStringW
ModifyMenuW
EnableScrollBar
WinHelpW
ReleaseCapture
SetPropA
RegisterClipboardFormatW
MapVirtualKeyW
ShowCursor
MsgWaitForMultipleObjects
GetSubMenu
CallWindowProcW
OffsetRect
RegisterClassA
gdi32
GetTextColor
GetCurrentPositionEx
RestoreDC
GetEnhMetaFileHeader
CopyEnhMetaFileA
CreateMetaFileW
CopyMetaFileW
EnumFontFamiliesA
CreateRectRgn
GetObjectA
GetOutlineTextMetricsW
GetTextExtentPoint32A
GetViewportOrgEx
CreatePen
Chord
GetNearestColor
CreatePatternBrush
AbortDoc
GdiComment
DeleteObject
comdlg32
GetOpenFileNameA
version
VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoW
Sections
.text Size: 232KB - Virtual size: 229KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 600B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ