Static task
static1
Behavioral task
behavioral1
Sample
d9c69b9c318c047823174c518c89531a6f43b36a798f6451267ef5e50c744b57.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
d9c69b9c318c047823174c518c89531a6f43b36a798f6451267ef5e50c744b57.exe
Resource
win10v2004-20221111-en
General
-
Target
d9c69b9c318c047823174c518c89531a6f43b36a798f6451267ef5e50c744b57
-
Size
304KB
-
MD5
485b9fd0417e5559a8a2c2e5ddc537c1
-
SHA1
99f80a41044e3d2328273dc96de61cc2eab956fc
-
SHA256
d9c69b9c318c047823174c518c89531a6f43b36a798f6451267ef5e50c744b57
-
SHA512
dbd885d58c019705f49ddac946579ec08af3a68cee5304a901ecd5a8f820ed975daab4af12b99919e25f9f1500999cd78090590fdea0e640d09341250064a185
-
SSDEEP
6144:Ui7P4vh2cFesC9/Rp09QPO8rHBWiLvMqNHSF4jmQN/UYzVolCAr1U693whemo:Ug452nsM/Ry94O8rHBWiLtHih0dzVol6
Malware Config
Signatures
Files
-
d9c69b9c318c047823174c518c89531a6f43b36a798f6451267ef5e50c744b57.exe windows x86
21e7b59c80827e494cfc71330cafefd3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
GetDC
GetCursorPos
DestroyWindow
GetParent
UpdateWindow
ShowWindow
EnableWindow
TranslateMessage
IsWindow
GetWindow
DispatchMessageA
EnableMenuItem
GetWindowLongA
CreateWindowExA
EndPaint
SetFocus
BeginPaint
SetWindowPos
ReleaseDC
MoveWindow
SetForegroundWindow
IsWindowEnabled
GetWindowRect
SetWindowLongA
GetSubMenu
GetDlgItem
ScreenToClient
LoadCursorA
LoadIconA
GetDesktopWindow
EndDialog
MessageBeep
GetSysColor
SystemParametersInfoA
InvalidateRect
SendMessageA
GetClientRect
CallWindowProcA
SetCursor
advapi32
RegCreateKeyExA
RegSetValueExA
RegDeleteKeyA
RegQueryValueExA
kernel32
InitializeCriticalSection
LoadResource
FindClose
TlsGetValue
FormatMessageA
SetLastError
GetModuleFileNameW
IsDebuggerPresent
ExitProcess
GetModuleFileNameA
UnhandledExceptionFilter
InterlockedDecrement
GetStdHandle
GetConsoleOutputCP
ReleaseMutex
GetFileAttributesA
LocalFree
GetDriveTypeA
HeapDestroy
FreeEnvironmentStringsA
DeleteCriticalSection
GetCurrentProcess
GetConsoleMode
GetLocaleInfoA
LocalAlloc
FreeEnvironmentStringsW
GetLocaleInfoW
SetStdHandle
GetTempPathA
GetCPInfo
LoadLibraryW
GetStringTypeA
InterlockedExchange
WriteFile
SetEvent
SetFileAttributesA
HeapReAlloc
WaitForSingleObject
CreateDirectoryA
VirtualAlloc
Sleep
VirtualFree
UnmapViewOfFile
GetEnvironmentStrings
GetModuleHandleW
GetACP
CloseHandle
ReadFile
GetModuleHandleA
TlsFree
MapViewOfFile
RaiseException
GetCurrentThread
GetCommandLineA
HeapSize
WideCharToMultiByte
LockResource
GetCurrentProcessId
SizeofResource
lstrlenW
GlobalUnlock
GetEnvironmentStringsW
LCMapStringA
GlobalFree
HeapCreate
LCMapStringW
GetLastError
LeaveCriticalSection
HeapAlloc
CreateFileA
TlsSetValue
GetFileType
CreateEventA
CreateFileW
GlobalLock
FindFirstFileW
CreateFileMappingA
ResetEvent
FindNextFileW
CompareStringW
GetSystemInfo
GetProcAddress
DeleteFileA
MultiByteToWideChar
GetFileSize
GetStartupInfoA
FreeLibrary
LoadLibraryA
GetVersionExA
TlsAlloc
GetTickCount
QueryPerformanceCounter
GetOEMCP
GetVersionExW
lstrcmpiA
SetHandleCount
EnterCriticalSection
WriteConsoleW
InterlockedIncrement
GetCurrentThreadId
SetEndOfFile
GlobalAlloc
GetVersion
WriteConsoleA
TerminateProcess
SetEnvironmentVariableA
SetUnhandledExceptionFilter
SetFilePointer
CreateMutexA
GetSystemTimeAsFileTime
oleaut32
VariantClear
VariantInit
SysFreeString
SysAllocStringLen
SysStringLen
msvcrt
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_strcmpi
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 280KB - Virtual size: 278KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 904B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ