Static task
static1
Behavioral task
behavioral1
Sample
9c8d4905928b378f414061e249960301ee65dd2bd7c9a98482ccec95cdd1a128.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
9c8d4905928b378f414061e249960301ee65dd2bd7c9a98482ccec95cdd1a128.exe
Resource
win10v2004-20220812-en
General
-
Target
9c8d4905928b378f414061e249960301ee65dd2bd7c9a98482ccec95cdd1a128
-
Size
246KB
-
MD5
45cd16cc34b93ddaefb7067aa2f6b390
-
SHA1
9fa1259efdeafb22d3ef94cdcd6e75d523117689
-
SHA256
9c8d4905928b378f414061e249960301ee65dd2bd7c9a98482ccec95cdd1a128
-
SHA512
3c3160b149d60b28bbf9c0290f526cd0fc48d41623dee4fcbbdec42992b16b0de4790e4a729a61290573b5586fac308c2d192197ae339ee3f22a754b2ffdfedc
-
SSDEEP
6144:c4pYTk0IFj6SEw5CvXmu7CJ4WKyqEcKcN:c4mo0IFj6SEwkvWXuWdqt
Malware Config
Signatures
Files
-
9c8d4905928b378f414061e249960301ee65dd2bd7c9a98482ccec95cdd1a128.exe windows x86
dc4c1346fa6a82767ecc3c6392ca448e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetCapture
GetCursor
GetForegroundWindow
DeferWindowPos
GetClassInfoA
GetCursorPos
MessageBoxA
GetClipboardData
IsDialogMessageA
GetKeyNameTextA
GetClientRect
HideCaret
GetWindowTextA
GetDCEx
DispatchMessageA
RegisterClassA
EqualRect
GetFocus
IsWindowEnabled
GetDC
IsWindowVisible
GetDlgItem
EnableWindow
GetClassLongA
GetMessagePos
CreateMenu
DrawMenuBar
GetIconInfo
GetDesktopWindow
DefFrameProcA
GetSubMenu
msvcrt
strncmp
memmove
malloc
acos
memcpy
comdlg32
FindTextA
GetOpenFileNameA
ChooseColorA
GetSaveFileNameA
GetFileTitleA
ole32
CLSIDFromProgID
CreateBindCtx
StgOpenStorage
ReleaseStgMedium
CoCreateGuid
PropVariantClear
CoCreateFreeThreadedMarshaler
WriteClassStm
CoFreeUnusedLibraries
advapi32
RegOpenKeyExA
RegOpenKeyA
shell32
SHFileOperationA
SHGetSpecialFolderLocation
SHGetDiskFreeSpaceA
SHGetDesktopFolder
Shell_NotifyIconA
kernel32
ReadFile
GetStringTypeW
GetUserDefaultLCID
GetVersionExA
FreeLibrary
GetDateFormatA
VirtualAllocEx
CloseHandle
LoadLibraryExA
SizeofResource
GetModuleHandleA
Sleep
LocalFree
GetEnvironmentStrings
GetCurrentThreadId
GetCommandLineA
MulDiv
GetLocalTime
GetStringTypeA
GetSystemDefaultLangID
SetLastError
GetOEMCP
GetVersion
WaitForSingleObject
WriteFile
SetEndOfFile
CreateFileA
LockResource
GetCPInfo
EnumCalendarInfoA
GetProcessHeap
GetThreadLocale
lstrcatA
lstrlenA
CreateThread
DeleteCriticalSection
EnterCriticalSection
FormatMessageA
LoadLibraryA
GetTickCount
GlobalAddAtomA
GetCurrentThread
ExitProcess
VirtualAlloc
RaiseException
GetFullPathNameA
MoveFileA
GetModuleFileNameA
GlobalAlloc
HeapAlloc
CreateEventA
GetACP
FreeResource
FindClose
ExitThread
LocalAlloc
ResetEvent
GetFileAttributesA
HeapFree
InitializeCriticalSection
GlobalDeleteAtom
oleaut32
SafeArrayCreate
SafeArrayPtrOfIndex
SysAllocStringLen
SafeArrayGetUBound
VariantChangeType
SafeArrayUnaccessData
Sections
.text Size: 37KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bss Size: 203KB - Virtual size: 203KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 843B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
DATA Size: 1024B - Virtual size: 787B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE