Static task
static1
Behavioral task
behavioral1
Sample
9fd1e17f09b6c5b32d9b09f895e46e2bbb02a48d73a4e62b16b6bb5433ddc16b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9fd1e17f09b6c5b32d9b09f895e46e2bbb02a48d73a4e62b16b6bb5433ddc16b.exe
Resource
win10v2004-20221111-en
General
-
Target
9fd1e17f09b6c5b32d9b09f895e46e2bbb02a48d73a4e62b16b6bb5433ddc16b
-
Size
822KB
-
MD5
12a50154d28e1bd662a9230a08ea0d44
-
SHA1
772b507b399b9714e318e045ad46fc6ac24baa04
-
SHA256
9fd1e17f09b6c5b32d9b09f895e46e2bbb02a48d73a4e62b16b6bb5433ddc16b
-
SHA512
7f899d37bd5af5310847bf6db8f9e50f1c00a15eb08bb32e73f72fa92961845f0f71fa61ef792aec4ed596caa45253ad1add370ff4423797bef5ede0d764295f
-
SSDEEP
12288:CcS5lOXPVo9KEmDy15S31Lp+LFr+8RHIO38cwgx4:Cc4oVo0beTSpsTR8Br
Malware Config
Signatures
Files
-
9fd1e17f09b6c5b32d9b09f895e46e2bbb02a48d73a4e62b16b6bb5433ddc16b.exe windows x86
37ebf506ac22acf1f7b2649091f21837
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualProtect
VirtualProtect
CreateEventW
VirtualProtect
InterlockedCompareExchange
MultiByteToWideChar
GetLastError
Sleep
CloseHandle
GetModuleFileNameW
HeapAlloc
HeapAlloc
CreateFileW
GetProcessHeap
CreateFileW
GetCurrentProcess
InitializeCriticalSection
EnterCriticalSection
LoadLibraryA
DisableThreadLibraryCalls
SetLastError
ReadFile
CreateFileW
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryW
LoadLibraryW
GetCurrentThreadId
lstrcmpiW
LeaveCriticalSection
GetCurrentThreadId
GetCurrentProcessId
HeapDestroy
LeaveCriticalSection
MultiByteToWideChar
LocalAlloc
LocalFree
LeaveCriticalSection
LoadLibraryW
QueryPerformanceCounter
VirtualProtect
GetModuleHandleA
GetVersionExA
LoadLibraryW
FreeLibrary
EnterCriticalSection
GetVersionExA
GetSystemTimeAsFileTime
LoadLibraryA
VirtualProtect
GetCurrentThreadId
CreateFileW
LoadLibraryA
SetLastError
HeapFree
GetCurrentThreadId
LoadLibraryW
GetSystemTimeAsFileTime
InterlockedCompareExchange
EnterCriticalSection
ReadFile
LocalAlloc
Sleep
UnhandledExceptionFilter
HeapFree
InterlockedDecrement
VirtualAlloc
ReadFile
LoadLibraryW
InterlockedCompareExchange
CreateEventW
GetModuleFileNameA
InterlockedDecrement
GetLastError
LeaveCriticalSection
LoadLibraryA
GetCurrentProcess
EnterCriticalSection
GetLastError
LocalFree
GetModuleFileNameW
GetProcessHeap
LeaveCriticalSection
GetCurrentThreadId
GetCurrentProcess
MultiByteToWideChar
GetVersionExA
QueryPerformanceCounter
MultiByteToWideChar
CreateThread
LoadLibraryW
QueryPerformanceCounter
VirtualAlloc
VirtualAlloc
GetModuleHandleW
DeleteCriticalSection
GetCurrentProcessId
InterlockedCompareExchange
GetCurrentProcessId
GetProcessHeap
CreateFileW
InterlockedDecrement
lstrlenA
user32
LoadCursorW
KillTimer
SetDlgItemTextW
GetParent
PeekMessageW
PeekMessageW
PostQuitMessage
LoadCursorW
BeginPaint
BeginPaint
InvalidateRect
SendMessageW
DefWindowProcW
PeekMessageW
PeekMessageW
PostMessageW
PostQuitMessage
GetClientRect
SendMessageW
LoadStringW
ReleaseDC
KillTimer
CharNextW
LoadStringW
SendDlgItemMessageW
GetDesktopWindow
TranslateMessage
TranslateMessage
SetWindowTextW
BeginPaint
SetForegroundWindow
EnableWindow
GetWindowRect
IsDlgButtonChecked
GetFocus
KillTimer
DispatchMessageW
SetDlgItemTextW
GetSystemMetrics
GetFocus
SetWindowPos
PostMessageW
SetWindowTextW
GetSysColor
GetFocus
InvalidateRect
GetWindowRect
DispatchMessageW
CharNextW
PostMessageW
SetTimer
CreateWindowExW
BeginPaint
GetClientRect
ShowWindow
PostMessageW
DestroyWindow
IsDlgButtonChecked
GetFocus
SetCursor
GetFocus
DialogBoxParamW
GetWindowRect
wsprintfA
IsWindow
SendMessageW
GetSysColor
GetClientRect
SendMessageW
GetDesktopWindow
PeekMessageW
BeginPaint
BeginPaint
CreateWindowExW
SetForegroundWindow
IsWindow
SetWindowPos
ReleaseDC
TranslateMessage
MessageBoxW
PostQuitMessage
DefWindowProcW
SetWindowLongW
SetForegroundWindow
SendDlgItemMessageW
GetSystemMetrics
SendMessageW
CharNextW
EndDialog
DispatchMessageW
SetWindowLongW
GetDlgItem
GetWindowLongW
DispatchMessageW
SetFocus
GetDesktopWindow
SetDlgItemTextW
EndDialog
LoadIconW
EnableWindow
BeginPaint
EnableWindow
GetWindowRect
DestroyWindow
Sections
.text Size: 733KB - Virtual size: 992KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 82KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ