Static task
static1
Behavioral task
behavioral1
Sample
d9c402c700f176bc4236b26de335f23e231f997c7b2b270279ea3baccc6f7e88.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d9c402c700f176bc4236b26de335f23e231f997c7b2b270279ea3baccc6f7e88.exe
Resource
win10v2004-20220812-en
General
-
Target
d9c402c700f176bc4236b26de335f23e231f997c7b2b270279ea3baccc6f7e88
-
Size
156KB
-
MD5
2dcb13789008f03479a7ab0983b5ada9
-
SHA1
ef714a3b7d5c9e3056d8499356a6456d1d962481
-
SHA256
d9c402c700f176bc4236b26de335f23e231f997c7b2b270279ea3baccc6f7e88
-
SHA512
5e3ee8413e58f15ea46489e464a65c3988069b6d96f383d61075a3157d564e8f9ed81d768ff05b65a8ab99c975a916ea8d1d6a1203c0066219c27f685c362ef3
-
SSDEEP
3072:3ID3pnifCjW6saLdvnuGm7TpbdTUHUgMXtLG3G:3ITcZGmfVdqMXtLL
Malware Config
Signatures
Files
-
d9c402c700f176bc4236b26de335f23e231f997c7b2b270279ea3baccc6f7e88.exe windows x86
3e3ad78cb3cc55c30169ed14ebe194c8
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
VirtualAlloc
GetSystemInfo
GetModuleHandleA
LoadLibraryExA
GetVersionExA
CloseHandle
IsProcessorFeaturePresent
HeapSize
HeapReAlloc
GetStringTypeW
LCMapStringW
MultiByteToWideChar
GetCurrentProcess
TerminateProcess
IsDebuggerPresent
UnhandledExceptionFilter
LoadLibraryW
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
EnterCriticalSection
CreateFileW
ReadFile
Sleep
GetProcessHeap
GetTickCount
HeapFree
HeapAlloc
lstrlenA
SetFilePointer
GetFileSize
RtlUnwind
GetEnvironmentVariableW
GetCommandLineA
HeapSetInformation
GetStartupInfoW
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
DecodePointer
TlsFree
InterlockedIncrement
GetModuleHandleW
SetLastError
GetCurrentThreadId
GetLastError
InterlockedDecrement
SetUnhandledExceptionFilter
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
HeapCreate
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
VirtualQuery
user32
EndPaint
DestroyWindow
GetMessageA
RegisterClassExA
PostQuitMessage
LoadIconA
wsprintfA
GetClientRect
SendMessageA
BeginPaint
TranslateMessage
MessageBoxA
CreateWindowExA
DefWindowProcA
ShowWindow
DispatchMessageA
GetSystemMetrics
FindWindowA
LoadCursorA
gdi32
SelectObject
SetTextColor
CreateFontA
DeleteObject
TextOutA
GetTextMetricsA
GetStockObject
iphlpapi
GetTcpStatistics
Sections
.text Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 116KB - Virtual size: 119KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ