Static task
static1
Behavioral task
behavioral1
Sample
9a938d0dfab32ce52c903a7558a9e47757bae06dc752649d117fd48f7e6ad2ca.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9a938d0dfab32ce52c903a7558a9e47757bae06dc752649d117fd48f7e6ad2ca.exe
Resource
win10v2004-20220901-en
General
-
Target
9a938d0dfab32ce52c903a7558a9e47757bae06dc752649d117fd48f7e6ad2ca
-
Size
81KB
-
MD5
20b08c6e451fc05cc1e89b87f436fbe7
-
SHA1
a48f1b075ffe1b8914437d2c96e6ce08cc4b48a9
-
SHA256
9a938d0dfab32ce52c903a7558a9e47757bae06dc752649d117fd48f7e6ad2ca
-
SHA512
f48778d5e1aad5a5757d055e9b0ab7a335609843ade82c6e03cb8f1ed48d7e231f019c60f132d508b3a4163412ae0de7661883bde1c35e1757a407466af4672b
-
SSDEEP
1536:apbwiYUEsH1CT4JE89exS0Xin0o2AteJbIzTsFdr:QbwD+1AU9e0kW0oPWbIzTsFdr
Malware Config
Signatures
Files
-
9a938d0dfab32ce52c903a7558a9e47757bae06dc752649d117fd48f7e6ad2ca.exe windows x86
5eed596fd945af7b264d791fe02635ea
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetACP
lstrcpyA
GetACP
FreeLibrary
GetACP
lstrcatA
GetACP
ExitProcess
GetACP
GetCommandLineA
GetACP
lstrcpynA
GetACP
GetLastError
GetACP
GetStdHandle
GetACP
GetCPInfo
GetACP
GetConsoleCP
GetModuleFileNameA
lstrcmpA
GetDateFormatA
lstrcpyA
GetLocalTime
lstrlenA
lstrcmpiA
GlobalFree
GetStringTypeA
GetFileAttributesA
GetLastError
GetModuleHandleA
lstrcatA
GetCPInfo
Sleep
GetStringTypeW
lstrcpynA
GetFileSize
WideCharToMultiByte
advapi32
RegLoadKeyA
RegReplaceKeyA
RegCreateKeyExA
RegEnumValueW
RegEnumValueA
RegEnumKeyExW
RegOpenKeyA
RegDeleteKeyW
RegQueryValueExA
RegEnumKeyA
RegDeleteValueW
RegOpenKeyExW
RegQueryValueA
RegQueryValueW
RegDeleteValueA
RegQueryInfoKeyW
RegQueryValueExW
RegEnumKeyW
RegFlushKey
user32
DialogBoxParamA
EndDialog
GetWindowTextLengthA
LoadMenuA
DrawIcon
CalcMenuBar
GetMenu
AppendMenuA
LoadCursorA
CopyImage
CopyRect
CopyIcon
CreateIcon
IsWindow
DrawIconEx
AppendMenuW
DrawTextW
AlignRects
GetFocus
InsertMenuA
Sections
.tadt Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.raata Size: 46KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.eddaa Size: 10KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bas Size: - Virtual size: 3KB
IMAGE_SCN_MEM_READ
.rddc Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ