Static task
static1
Behavioral task
behavioral1
Sample
9e47cde7e54dd5aa946c7f175fd033521f94a030a02cd7f1a502c09c221cec79.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
9e47cde7e54dd5aa946c7f175fd033521f94a030a02cd7f1a502c09c221cec79.exe
Resource
win10v2004-20220812-en
General
-
Target
9e47cde7e54dd5aa946c7f175fd033521f94a030a02cd7f1a502c09c221cec79
-
Size
236KB
-
MD5
be7f5ae5c08b622e981ca02397e4c696
-
SHA1
3c18d6ed5f6179202455e9dcf24e141c6903639c
-
SHA256
9e47cde7e54dd5aa946c7f175fd033521f94a030a02cd7f1a502c09c221cec79
-
SHA512
32c7c2a5647b724496a43f3855150127fbd1cb2f4fe7521e47fa4493957271fcba766f38448a15dec8fde602ac2a38ad458dab154b7708a6945790dba4a05919
-
SSDEEP
6144:2nfzTwEO1T4b7IZiev9+hlAQDC5Bpvp1T:2nPwECTpvyXDCVp1
Malware Config
Signatures
Files
-
9e47cde7e54dd5aa946c7f175fd033521f94a030a02cd7f1a502c09c221cec79.exe windows x86
ecdbab79005e0c7f3064f7f92cbe95a6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_acmdln
fabs
strcmp
exit
srand
memcpy
sqrt
advapi32
RegQueryValueA
kernel32
LoadLibraryExA
DeleteCriticalSection
GetOEMCP
ExitProcess
GetLastError
GetStringTypeA
GetLocalTime
VirtualAlloc
GetProcAddress
VirtualAllocEx
ExitThread
GetModuleHandleA
lstrlenA
GetCommandLineW
LoadLibraryA
FindResourceA
LocalAlloc
GetCommandLineA
GetTickCount
comdlg32
GetSaveFileNameA
GetOpenFileNameA
ChooseColorA
GetFileTitleA
gdi32
SetBkMode
SelectObject
CreateFontIndirectA
GetObjectA
RestoreDC
LineTo
CreateBrushIndirect
user32
LoadIconA
EnableMenuItem
DrawAnimatedRects
GetDCEx
IsWindowUnicode
GetMenuStringA
GetMenu
SetClassLongA
TranslateMessage
GetActiveWindow
ReleaseCapture
CharToOemA
DrawFrameControl
OffsetRect
SetCursor
SetFocus
GetWindowTextA
ShowScrollBar
BeginPaint
CheckMenuItem
SetParent
GetCursor
TranslateMDISysAccel
GetSysColorBrush
GetWindowLongA
GetIconInfo
Sections
.text Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 591B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.fdata Size: 130KB - Virtual size: 130KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ddata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ