Static task
static1
Behavioral task
behavioral1
Sample
f9a42f4a703721e3459428c9ee565195ef31ff9bd7cebb11e70d92a1bf85158b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f9a42f4a703721e3459428c9ee565195ef31ff9bd7cebb11e70d92a1bf85158b.exe
Resource
win10v2004-20220901-en
General
-
Target
f9a42f4a703721e3459428c9ee565195ef31ff9bd7cebb11e70d92a1bf85158b
-
Size
166KB
-
MD5
9557e0782adc855effd2af7251763657
-
SHA1
7a44347fbd521ca8489503a4e4b18b696ba1cd14
-
SHA256
f9a42f4a703721e3459428c9ee565195ef31ff9bd7cebb11e70d92a1bf85158b
-
SHA512
169c636e0b1dc8d774726e36a514fd748ab893531b5ef3790a19cbe2cda409190f2aacad73a6ec86958e273bf86da0e50baf13559715fe3992eb1fd2a4b6c123
-
SSDEEP
3072:EGBfuFbqnYM26hA3bv+BP9NI79dJVsYMtxfGxZMQEVhS2kKUg93+bVd:B2fMxyGxcZJMtxCRNVd
Malware Config
Signatures
Files
-
f9a42f4a703721e3459428c9ee565195ef31ff9bd7cebb11e70d92a1bf85158b.exe windows x86
a2ee9041352cdd04754aff53b524b31c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateThread
HeapDestroy
GetSystemTimeAsFileTime
GetACP
SetConsoleCP
SetLastError
WideCharToMultiByte
GetOEMCP
ResumeThread
ExitProcess
FreeLibrary
HeapCreate
GetCurrentProcess
LeaveCriticalSection
TlsAlloc
SetStdHandle
SystemTimeToFileTime
VirtualProtect
GetStringTypeA
FindClose
Sleep
OpenProcess
GetModuleHandleA
UnhandledExceptionFilter
ExpandEnvironmentStringsW
TerminateProcess
WriteFile
HeapAlloc
CreateMutexA
GetCommandLineA
GetCurrentProcessId
GetTickCount
LocalAlloc
GetStartupInfoA
user32
GetSysColor
DialogBoxParamW
DispatchMessageW
GetWindowRect
GetParent
gdi32
CreatePatternBrush
SetBkColor
msvcrt
_wcsnicmp
qsort
??1exception@@UAE@XZ
ole32
CoUninitialize
StgSetTimes
CoTaskMemRealloc
Sections
.text Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 52KB - Virtual size: 79KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ