Static task
static1
Behavioral task
behavioral1
Sample
9bc98d15f243257c1b5bca59464abe68c680cd5482ba9f5082201dde41a016cf.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
9bc98d15f243257c1b5bca59464abe68c680cd5482ba9f5082201dde41a016cf.exe
Resource
win10v2004-20220901-en
General
-
Target
9bc98d15f243257c1b5bca59464abe68c680cd5482ba9f5082201dde41a016cf
-
Size
122KB
-
MD5
4bfc92bc80045b031e7c14070143e1d3
-
SHA1
0d80e47173d8952f35edc76f0fc8c74b4829ee49
-
SHA256
9bc98d15f243257c1b5bca59464abe68c680cd5482ba9f5082201dde41a016cf
-
SHA512
55fa327f178fc6e6ea9b99c8e576913ddb2ab2b609729e5bb8b45c60f309b07fba67f48c15e0cd0636f2dcc64a44681dc145bfbb163f971063e9246286c6cf38
-
SSDEEP
3072:FknFVUE0ZWwIOnVDeAX7jmkHdUMiT6xIUJrVEOZ:FiURnLnHjGzkrVrZ
Malware Config
Signatures
Files
-
9bc98d15f243257c1b5bca59464abe68c680cd5482ba9f5082201dde41a016cf.exe windows x86
235d7a7092b7d4c579ace744497f6fa0
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
iphlpapi
GetAdaptersInfo
shlwapi
PathRemoveBackslashW
PathRemoveExtensionW
PathStripPathW
PathFindExtensionW
PathAddBackslashW
StrFormatByteSize64A
PathRemoveExtensionA
kernel32
ReadFile
GetFileSizeEx
SetConsoleTextAttribute
lstrlenW
GetStdHandle
WriteFile
SetFilePointer
SetEndOfFile
CreateFileW
GetLastError
CloseHandle
GetLocalTime
WriteConsoleW
SetFilePointerEx
lstrcmpiW
GetLogicalDrives
FindFirstFileW
EnterCriticalSection
FindNextFileW
SetThreadUILanguage
LeaveCriticalSection
InitializeCriticalSection
FindClose
ExitThread
OpenProcess
SetFileAttributesW
CreateToolhelp32Snapshot
Sleep
Process32NextW
GlobalAlloc
DeleteFileW
Process32FirstW
GlobalFree
CreateThread
lstrcmpW
MoveFileW
GetDriveTypeW
SetConsoleMode
GetConsoleMode
ExitProcess
GetConsoleWindow
InterlockedFlushSList
lstrcpyA
DeleteCriticalSection
lstrcmpiA
InterlockedPushEntrySList
InitializeSListHead
InterlockedPopEntrySList
GetStringTypeW
GetFileType
SetStdHandle
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
MultiByteToWideChar
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FindFirstFileExW
HeapAlloc
HeapFree
GetProcessHeap
GetCommandLineW
GetCommandLineA
GetModuleHandleExW
GetModuleFileNameW
RaiseException
LoadLibraryExW
GetProcAddress
FreeLibrary
DecodePointer
TlsFree
TlsSetValue
TlsGetValue
CompareStringW
LCMapStringW
SetConsoleTitleA
GetConsoleCP
FlushFileBuffers
HeapReAlloc
HeapSize
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RtlUnwind
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
user32
wsprintfW
wvsprintfW
wsprintfA
GetSystemMenu
DeleteMenu
SetWindowLongA
GetWindowLongA
SetLayeredWindowAttributes
EnableMenuItem
mpr
WNetOpenEnumW
WNetGetConnectionW
WNetEnumResourceW
WNetCloseEnum
ws2_32
WSAGetLastError
htons
connect
socket
inet_addr
WSAStartup
select
closesocket
__WSAFDIsSet
WSACleanup
ioctlsocket
netapi32
NetShareEnum
NetApiBufferFree
advapi32
CryptAcquireContextW
CryptGenRandom
CryptReleaseContext
OpenProcessToken
SetThreadToken
DuplicateToken
GetTokenInformation
ntdll
strlen
memset
memcpy
strchr
Sections
.text Size: 83KB - Virtual size: 82KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ