Static task
static1
Behavioral task
behavioral1
Sample
9e1d9d4112bcf93f888752615da47d2cb565eaa4ba30c0b8a8a0f93495644f69.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
9e1d9d4112bcf93f888752615da47d2cb565eaa4ba30c0b8a8a0f93495644f69.exe
Resource
win10v2004-20221111-en
General
-
Target
9e1d9d4112bcf93f888752615da47d2cb565eaa4ba30c0b8a8a0f93495644f69
-
Size
2.1MB
-
MD5
3f336f5832eadc1561de101d0e1525d1
-
SHA1
70ae7bc0530bdfd9197cf18e9a879394e8605074
-
SHA256
9e1d9d4112bcf93f888752615da47d2cb565eaa4ba30c0b8a8a0f93495644f69
-
SHA512
95e081c2e4955e8c5ae2a0da3b016bf160553beaf0cf815aa6206f96d5c671da5fa1872a054a1169d0bad840f1e230f107fc35e0c433b99f8b124ea3a085c8c9
-
SSDEEP
49152:6VBMnG9mkqA9tm7tYFTcDFznZzYDTPNYP:fyqATzTcDFzV
Malware Config
Signatures
Files
-
9e1d9d4112bcf93f888752615da47d2cb565eaa4ba30c0b8a8a0f93495644f69.exe windows x86
210d50cef9e97bab039bd30573b06522
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
PathAppendA
PathRemoveFileSpecW
PathStripToRootW
gdiplus
GdipFree
GdipAlloc
GdipCreateFromHDC
GdipDeleteGraphics
GdipDrawImageRectI
GdipLoadImageFromFile
GdipDrawImagePointRectI
GdiplusShutdown
GdiplusStartup
GdipGetImageHeight
GdipGetImageWidth
GdipCloneImage
GdipDisposeImage
GdipLoadImageFromFileICM
kernel32
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
CreateSemaphoreW
WaitForSingleObject
ReleaseSemaphore
Sleep
CreateThread
CloseHandle
TerminateThread
SetConsoleScreenBufferSize
GetConsoleScreenBufferInfo
GetStdHandle
AllocConsole
AttachConsole
FreeConsole
LocalFree
GetCommandLineW
GlobalAlloc
GetLastError
CreateFileW
ReadFile
SetFilePointerEx
WriteFile
GetDriveTypeW
GetDiskFreeSpaceExW
GetDiskFreeSpaceW
GetVolumeInformationW
DeviceIoControl
GetProcAddress
GetModuleHandleW
GetSystemDirectoryA
FindResourceW
SizeofResource
LockResource
LoadResource
FindResourceExW
DeleteFileW
GetFileAttributesW
GetFullPathNameW
GetFileSizeEx
WritePrivateProfileStringW
GetPrivateProfileSectionW
GetPrivateProfileSectionNamesW
WritePrivateProfileSectionW
GetPrivateProfileStringW
lstrcpyW
lstrcmpiW
CompareStringW
FreeLibrary
LoadLibraryExW
GetTimeFormatW
GetDateFormatW
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
FormatMessageW
FindFirstFileW
FindClose
EnterCriticalSection
LoadLibraryW
FindNextFileW
GetSystemDirectoryW
SetFilePointer
GetVolumePathNameW
GetThreadTimes
GetCurrentThread
GetModuleHandleA
InitializeCriticalSectionAndSpinCount
IsValidCodePage
GetOEMCP
GetACP
HeapCreate
FatalAppExitA
FlushFileBuffers
GetStartupInfoA
SetHandleCount
GetConsoleMode
GetConsoleCP
GetTimeZoneInformation
GetModuleFileNameA
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetStringTypeW
GetCPInfo
LCMapStringW
LCMapStringA
ExitProcess
GetStartupInfoW
GetFileAttributesA
WriteConsoleW
ExitThread
GetFileType
SetStdHandle
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetSystemTimeAsFileTime
RtlUnwind
InterlockedExchange
HeapSize
HeapReAlloc
HeapDestroy
VirtualAlloc
lstrcpynW
VirtualFree
IsProcessorFeaturePresent
LoadLibraryA
HeapAlloc
GetProcessHeap
HeapFree
InterlockedCompareExchange
GetVersionExW
OutputDebugStringW
DebugBreak
SetLastError
RaiseException
GetCurrentThreadId
QueryPerformanceFrequency
QueryPerformanceCounter
WideCharToMultiByte
SetCurrentDirectoryA
GetDriveTypeA
GetFullPathNameA
SetConsoleCtrlHandler
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetTickCount
MultiByteToWideChar
InterlockedDecrement
lstrlenW
InterlockedIncrement
lstrlenA
GetCurrentProcess
FlushInstructionCache
GetModuleFileNameW
GetCurrentProcessId
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetStringTypeA
GetLocaleInfoW
WriteConsoleA
GetConsoleOutputCP
CreateFileA
SetEndOfFile
CompareStringA
SetEnvironmentVariableA
ResumeThread
GetCurrentDirectoryA
user32
DestroyMenu
GetSubMenu
LoadMenuW
TrackPopupMenu
ClientToScreen
WindowFromPoint
SetWindowRgn
MsgWaitForMultipleObjects
RegisterClassExW
GetClassInfoExW
IsDialogMessageW
MonitorFromPoint
PeekMessageW
GetMessageW
TranslateMessage
DispatchMessageW
FindWindowW
CallWindowProcW
DrawFocusRect
FillRect
CreateWindowExW
IsWindowEnabled
GetSysColor
GetFocus
GetClassNameW
LoadCursorW
GetDlgCtrlID
ScreenToClient
GetCursorPos
GetCapture
ReleaseCapture
SetFocus
SetCapture
SetCursor
DestroyWindow
DefWindowProcW
ReleaseDC
GetDC
SetRect
OffsetRect
DrawTextW
CreateDialogParamW
GetSystemMetrics
LoadImageW
CharUpperW
wsprintfW
wvsprintfW
CharNextW
MessageBoxW
KillTimer
SetTimer
GetWindowTextLengthW
DialogBoxParamW
IsWindow
GetActiveWindow
EnableWindow
GetWindowTextW
SetWindowTextW
SendMessageW
LoadStringW
PtInRect
EndPaint
BeginPaint
GetParent
GetWindow
GetWindowRect
GetWindowLongW
MonitorFromWindow
GetMonitorInfoW
MapWindowPoints
SetWindowPos
GetDlgItem
ShowWindow
InvalidateRect
UpdateWindow
GetClientRect
MoveWindow
SetWindowLongW
EndDialog
PostMessageW
SetRectEmpty
UnregisterClassA
gdi32
DeleteObject
CreateCompatibleBitmap
CreateFontIndirectW
SelectObject
GetObjectW
SetTextColor
CreateRoundRectRgn
GetTextExtentPoint32W
BitBlt
SetBkMode
DeleteDC
GetStockObject
SaveDC
CreateCompatibleDC
comdlg32
GetOpenFileNameW
GetSaveFileNameW
advapi32
RegSetValueExW
RegCreateKeyExW
RegCloseKey
CryptGenRandom
CryptReleaseContext
CryptAcquireContextA
RegCreateKeyW
RegQueryInfoKeyW
RegSetValueExA
RegCreateKeyExA
RegQueryValueExA
RegOpenKeyExW
RegQueryValueExW
RegDeleteKeyW
RegDeleteValueW
RegEnumKeyExW
shell32
ShellExecuteW
SHGetFileInfoW
SHGetFolderPathAndSubDirW
ole32
CoInitialize
CoCreateInstance
CoTaskMemFree
CoTaskMemAlloc
CoTaskMemRealloc
CoUninitialize
oleaut32
VarUI4FromStr
SysFreeString
SysAllocString
comctl32
InitCommonControlsEx
_TrackMouseEvent
netapi32
Netbios
Sections
.text Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 287KB - Virtual size: 286KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 66KB - Virtual size: 83KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 351KB - Virtual size: 351KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ