Static task
static1
Behavioral task
behavioral1
Sample
909b14f65b4c872f2a75fe87dc032a893402c300c6698365d5e825d89a5bbd1d.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
909b14f65b4c872f2a75fe87dc032a893402c300c6698365d5e825d89a5bbd1d.exe
Resource
win10v2004-20221111-en
General
-
Target
909b14f65b4c872f2a75fe87dc032a893402c300c6698365d5e825d89a5bbd1d
-
Size
362KB
-
MD5
04d0d9ead228f29c195ce59599478d80
-
SHA1
72c61e71a700ae95b446e6b7712c2ea80241d8c9
-
SHA256
909b14f65b4c872f2a75fe87dc032a893402c300c6698365d5e825d89a5bbd1d
-
SHA512
48732bdbc7065b43824ca4276d777e6ef1a6b18e64f528d8d85a993b5a2fa30231a039b4ab0f45101cb7b86a7c22e9274a593acfd41059502829166e9199263f
-
SSDEEP
6144:2nWUSUD4N3K6XNA8wx8JNiIomtytQxukDwNFOw/VLzmAoFW5/iucWm0pO/5b:ET4ZK6XNyoe+ukKFFVLzmAHRcWv
Malware Config
Signatures
Files
-
909b14f65b4c872f2a75fe87dc032a893402c300c6698365d5e825d89a5bbd1d.exe windows x86
ee6de4129e2156685223d2168c70f3b6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ole32
CoCreateInstance
CoTaskMemFree
CoTaskMemAlloc
gdi32
DeleteDC
GetStockObject
SetTextColor
CreateCompatibleDC
SelectObject
GetDeviceCaps
SetBkColor
advapi32
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
RegQueryValueExW
RegSetValueExW
RegSetValueExA
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyExA
user32
MapWindowPoints
PostQuitMessage
SetWindowPos
IsWindow
EndPaint
GetDC
ReleaseDC
GetClientRect
DestroyWindow
GetMessageA
GetParent
UpdateWindow
ShowWindow
EnableWindow
TranslateMessage
IsWindowEnabled
LoadStringA
RegisterClassA
GetWindowLongA
CreateWindowExA
FillRect
SetFocus
BeginPaint
KillTimer
DefWindowProcA
GetSystemMetrics
GetWindowRect
SetWindowLongA
SetWindowTextA
GetSubMenu
GetDlgItem
ScreenToClient
LoadCursorA
LoadIconA
SetForegroundWindow
EndDialog
GetFocus
MoveWindow
MessageBoxA
GetSysColor
PtInRect
IsWindowVisible
InvalidateRect
SendMessageA
CallWindowProcA
SetCursor
kernel32
GetUserDefaultLCID
GetLocaleInfoW
HeapAlloc
EnumSystemLocalesA
IsValidLocale
SetConsoleCtrlHandler
IsBadWritePtr
FatalAppExitA
RtlUnwind
GetStdHandle
GetConsoleOutputCP
ReleaseMutex
FileTimeToSystemTime
GetFileAttributesA
WaitForSingleObject
LockResource
HeapDestroy
FindFirstFileW
SizeofResource
GetFileAttributesW
FreeEnvironmentStringsA
DeleteCriticalSection
GetCurrentProcess
GetConsoleMode
LocalAlloc
ExpandEnvironmentStringsA
CreateFileA
SetErrorMode
FreeEnvironmentStringsW
WideCharToMultiByte
GetStringTypeA
InterlockedExchange
GetSystemTimeAsFileTime
HeapReAlloc
GetStringTypeW
SetFileAttributesA
GetOEMCP
LocalFree
FormatMessageW
GetExitCodeProcess
InitializeCriticalSection
LoadResource
FindClose
InterlockedDecrement
FormatMessageA
SetLastError
GetEnvironmentVariableA
GetModuleFileNameW
VirtualProtect
IsDebuggerPresent
ExitProcess
lstrlenA
VirtualAlloc
GetCommandLineA
FindResourceA
Sleep
VirtualFree
WriteFile
HeapCreate
IsValidCodePage
CreateProcessA
SetStdHandle
GetCurrentThreadId
GetModuleHandleW
GetACP
lstrcpynA
CloseHandle
FindFirstFileA
ReadFile
SetFilePointer
TlsFree
MapViewOfFile
RaiseException
GetCurrentThread
InterlockedCompareExchange
HeapSize
GetCurrentDirectoryA
GetCommandLineW
GetCurrentProcessId
WritePrivateProfileStringA
GetEnvironmentStrings
lstrlenW
VirtualQuery
GlobalUnlock
GetEnvironmentStringsW
GetThreadLocale
LCMapStringA
GetConsoleCP
UnmapViewOfFile
LCMapStringW
GetLastError
LeaveCriticalSection
TlsSetValue
GetFileType
CreateEventA
CreateFileW
GetTimeZoneInformation
SetEvent
GlobalLock
WaitForMultipleObjects
FindNextFileA
CreateFileMappingA
CompareStringA
lstrcpyA
GlobalFree
FindNextFileW
lstrcmpA
CompareStringW
GetProcessHeap
GetSystemInfo
GetProcAddress
GetCPInfo
DeleteFileA
GetFileSize
GetStartupInfoA
LoadLibraryA
GetVersionExA
TlsAlloc
GetTickCount
QueryPerformanceCounter
FreeLibrary
GetVersionExW
LoadLibraryW
SetHandleCount
EnterCriticalSection
HeapFree
SetCurrentDirectoryA
InterlockedIncrement
GetVersion
GetLocaleInfoA
SetEndOfFile
CreateEventW
GlobalAlloc
WriteConsoleA
TerminateProcess
SetEnvironmentVariableA
GetSystemDirectoryA
MulDiv
SetUnhandledExceptionFilter
CreateThread
GetModuleHandleA
CreateMutexA
GetLocalTime
MultiByteToWideChar
TlsGetValue
UnhandledExceptionFilter
GetPrivateProfileStringA
LoadLibraryExA
GetModuleFileNameA
FlushFileBuffers
Sections
.text Size: 317KB - Virtual size: 316KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 21KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 18KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ