Static task
static1
Behavioral task
behavioral1
Sample
9632eb08cd903f42da2bea520956cafce454abe7c34d84b5e358d8407f74303c.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
9632eb08cd903f42da2bea520956cafce454abe7c34d84b5e358d8407f74303c.exe
Resource
win10v2004-20220812-en
General
-
Target
9632eb08cd903f42da2bea520956cafce454abe7c34d84b5e358d8407f74303c
-
Size
134KB
-
MD5
223aef1a974f1265a1fadf53d19755c7
-
SHA1
9a4771fbd36d44f4c8027316558bc9d0f266c2d3
-
SHA256
9632eb08cd903f42da2bea520956cafce454abe7c34d84b5e358d8407f74303c
-
SHA512
b0dbed0959c4cc043be9662c6b1d3740daefa52abb34242b61da5bb8c2fb3b25c0b9744a08a509ade75cb975fccb8649308a2f0d4483642b203ddb22f4338d54
-
SSDEEP
3072:r8oxAiwqH6AY0TS9WJZqFvVwMXnBU0CahYOIUm4:rXk4RnqFv/e0dYBUt
Malware Config
Signatures
Files
-
9632eb08cd903f42da2bea520956cafce454abe7c34d84b5e358d8407f74303c.exe windows x86
c1c6593b709dbbdfdde07a420b1ab4e4
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStringTypeW
GetFileType
GetCPInfo
GlobalFree
GetStringTypeA
Sleep
lstrcmpA
GetStdHandle
ExitProcess
FreeLibrary
lstrcpyA
GetConsoleCP
GetFileSize
lstrcatA
GetModuleHandleA
lstrlenA
GetDateFormatA
GetConsoleCP
WideCharToMultiByte
GetConsoleCP
lstrcmpA
GetConsoleCP
DeleteFileA
GetConsoleCP
GetLocalTime
GetConsoleCP
GetStringTypeA
GetConsoleCP
lstrlenA
GetConsoleCP
GetCPInfo
GetConsoleCP
lstrcpyA
GetConsoleCP
advapi32
RegLoadKeyW
RegQueryValueA
RegDeleteKeyW
RegQueryInfoKeyA
RegEnumValueA
RegFlushKey
RegOpenKeyA
RegReplaceKeyA
RegCreateKeyExA
RegLoadKeyA
RegOpenKeyExW
RegQueryValueW
RegDeleteKeyA
RegEnumKeyW
RegGetKeySecurity
RegOpenKeyExA
RegEnumKeyExW
RegDeleteValueW
RegCreateKeyW
user32
EndDialog
LoadMenuA
LoadCursorA
GetMenu
AlignRects
DrawTextW
GetDC
DialogBoxParamW
IsMenu
GetWindowTextLengthA
AppendMenuW
DialogBoxParamA
BlockInput
CalcMenuBar
DrawIconEx
GetDlgItem
DrawTextA
Sections
.taxt Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 104KB - Virtual size: 104KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.eddta Size: 4KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reaac Size: 4KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.iddaa Size: 2KB - Virtual size: 2KB
IMAGE_SCN_MEM_READ