Static task
static1
Behavioral task
behavioral1
Sample
9251afe209785c854b8cb6f9b9904209eac725092e86e8dfd225f1f59fa0dc2f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9251afe209785c854b8cb6f9b9904209eac725092e86e8dfd225f1f59fa0dc2f.exe
Resource
win10v2004-20220812-en
General
-
Target
9251afe209785c854b8cb6f9b9904209eac725092e86e8dfd225f1f59fa0dc2f
-
Size
159KB
-
MD5
c2fe5b1cdfcb16be9eab4f5d9f7c77e3
-
SHA1
062caaeb100ab88b2dee356dff022eac81e3bdba
-
SHA256
9251afe209785c854b8cb6f9b9904209eac725092e86e8dfd225f1f59fa0dc2f
-
SHA512
01e55e1e20e467e8e0f6bda2c280e23286b654b27267addfd42260915cf77f28d5e4af92d05ac80dc8dd3c753e05c9f023ae14c24a4297b385e8b9a4f8bd7970
-
SSDEEP
3072:ZGObnUvqOPXrstnxrUgd3YeGMVB7suEdOxNAcBDkdIBObQi5Lr:ZGObnUfPbsxxYgdnx7kaBObQiR
Malware Config
Signatures
Files
-
9251afe209785c854b8cb6f9b9904209eac725092e86e8dfd225f1f59fa0dc2f.exe windows x86
a9309ff559a71681dc30dc1e2d78dfe4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetFileSize
ReadFile
WriteFile
GlobalFree
CloseHandle
LoadLibraryA
GetProcAddress
CreateThread
GetModuleHandleA
CreateFileA
Sleep
GetStartupInfoA
user32
SendDlgItemMessageA
CheckDlgButton
EndDialog
LoadIconA
SendMessageA
GetDlgItemTextA
CreateWindowExA
GetWindowTextLengthA
LoadImageA
RegisterClassExA
UpdateWindow
GetMessageA
ShowWindow
TranslateMessage
DispatchMessageA
GetWindowTextA
SetWindowTextA
DefWindowProcA
SetDlgItemTextA
SetDlgItemInt
DialogBoxParamA
SetTimer
ExitWindowsEx
FindWindowA
FindWindowExA
EnableWindow
DestroyWindow
GetWindowRect
GetClientRect
PostQuitMessage
MessageBoxA
KillTimer
SetWindowPos
GetDlgItem
LoadCursorA
gdi32
GetStockObject
SetTextColor
CreateSolidBrush
SetBkMode
comdlg32
GetSaveFileNameA
GetOpenFileNameA
shell32
ShellExecuteA
msvcrt
__p__fmode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
memmove
malloc
sprintf
getenv
??2@YAPAXI@Z
strcmp
strstr
memset
memcpy
_except_handler3
rand
strlen
__set_app_type
_controlfp
__p__commode
Sections
.text Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 143KB - Virtual size: 142KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ