Static task
static1
Behavioral task
behavioral1
Sample
9e330fb507151662c1bbaef5b09c1ad0.exe
Resource
win7-20230220-en
General
-
Target
9e330fb507151662c1bbaef5b09c1ad0.exe
-
Size
319KB
-
MD5
9e330fb507151662c1bbaef5b09c1ad0
-
SHA1
f68489e995feaf6ad1e96a6ba14fc172e12ebf81
-
SHA256
8d5d3f79cd2abf2c28749b423e5a9a12c81d642d3e378f166b87ab155d92e21b
-
SHA512
e11b56a5e37d02b01f9449c3353ad63475146cbb4a687ca538d2418b9dabae6647d5955af5483b10e08616b703041a9e2f3343cd0b9a4272635fd7b43a0fdbef
-
SSDEEP
6144:1ngNHRw6jcz8aMCIvWFqvi1oEOdSzo6HeLAOMD:1ngNHRw0czPui10dSzWA
Malware Config
Signatures
Files
-
9e330fb507151662c1bbaef5b09c1ad0.exe.exe windows x86
96471588a0ff89e8a7af662d781a6ad6
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetProcessPriorityBoost
SleepConditionVariableCS
CreateDirectoryW
SetThreadAffinityMask
GetStartupInfoW
ReadFile
GetProcessWorkingSetSizeEx
EnumLanguageGroupLocalesW
SizeofResource
PowerSetRequest
GetCommConfig
SetFileIoOverlappedRange
SetConsoleHistoryInfo
SetConsoleCtrlHandler
RemoveVectoredExceptionHandler
EnumTimeFormatsW
GetVolumeInformationW
SetInformationJobObject
GetLogicalDrives
CancelIo
LocalLock
GetNamedPipeServerSessionId
CloseThreadpoolWork
FindFirstVolumeMountPointW
CloseThreadpool
EnumTimeFormatsEx
CompareFileTime
FindFirstFileW
InitOnceExecuteOnce
GetNumaAvailableMemoryNodeEx
GetProcessShutdownParameters
SetHandleInformation
IsBadWritePtr
EnumResourceLanguagesExW
FindFirstFileExW
NeedCurrentDirectoryForExePathW
RtlUnwind
LoadModule
GetConsoleAliasesW
SetThreadDescription
CopyFileTransactedW
SetConsoleDisplayMode
SetPriorityClass
GetPhysicallyInstalledSystemMemory
GetProfileSectionW
EnterCriticalSection
VirtualFree
GetSystemTimeAdjustment
GetHandleInformation
SetConsoleActiveScreenBuffer
SetSystemPowerState
GetProcessDEPPolicy
EnumCalendarInfoW
GetCPInfo
WriteFile
Wow64DisableWow64FsRedirection
TzSpecificLocalTimeToSystemTimeEx
GetThreadIdealProcessorEx
TryAcquireSRWLockExclusive
CheckTokenMembershipEx
RemoveDllDirectory
SetTimeZoneInformation
GetSystemDefaultUILanguage
CreatePrivateNamespaceW
UnregisterWait
GetShortPathNameW
GetDiskFreeSpaceW
SetConsoleMode
GetConsoleCursorInfo
GetPrivateProfileIntW
OutputDebugStringA
VirtualAlloc
AssignProcessToJobObject
TerminateProcess
RemoveDirectoryW
GetProfileIntW
GetProcessAffinityMask
PrefetchVirtualMemory
HeapLock
GetProcessIdOfThread
SetThreadpoolWaitEx
DisassociateCurrentThreadFromCallback
SetFileTime
OpenPrivateNamespaceW
WakeConditionVariable
FindFirstStreamTransactedW
CreateThreadpoolIo
ReOpenFile
DeleteFiber
GetSystemTimes
InitializeProcThreadAttributeList
RequestWakeupLatency
GetConsoleHistoryInfo
GetThreadLocale
SetEnvironmentVariableW
GetGeoInfoW
AddScopedPolicyIDAce
SetThreadUILanguage
SetConsoleWindowInfo
GetNumaProcessorNodeEx
GetNumaNodeNumberFromHandle
CheckTokenCapability
GetProcessId
CreateJobObjectW
DeleteTimerQueueEx
GetUserDefaultUILanguage
GetConsoleFontSize
SetSystemFileCacheSize
DnsHostnameToComputerNameW
InitializeCriticalSectionAndSpinCount
CreateConsoleScreenBuffer
GetThreadPreferredUILanguages
GetDynamicTimeZoneInformation
LeaveCriticalSection
CreatePipe
GetConsoleAliasExesW
FoldStringW
InitializeCriticalSection
AllocateUserPhysicalPages
SetSystemTime
LeaveCriticalSectionWhenCallbackReturns
InitializeConditionVariable
SetFilePointer
InitOnceInitialize
EnumUILanguagesW
GetQueuedCompletionStatus
GetCompressedFileSizeW
GetNumaProcessorNode
GetConsoleTitleW
FlsGetValue
OpenFileById
SetEndOfFile
UnlockFileEx
FlushProcessWriteBuffers
CreateBoundaryDescriptorW
FatalExit
InitializeCriticalSectionEx
CreateHardLinkW
ResetWriteWatch
FindClose
IsNLSDefinedString
GetVolumePathNameW
GetCommMask
LocalAlloc
CreateFileW
GetDateFormatEx
GetNumberFormatEx
GetCurrentThreadId
UnregisterBadMemoryNotification
OpenJobObjectW
DebugActiveProcessStop
GetPrivateProfileSectionNamesW
ReleaseMutex
OpenFileMappingW
CancelThreadpoolIo
GetUserPreferredUILanguages
WaitForThreadpoolWorkCallbacks
SetThreadpoolThreadMinimum
ApplicationRecoveryFinished
SetupComm
GetSystemDirectoryW
SetSearchPathMode
IsSystemResumeAutomatic
FreeEnvironmentStringsW
HeapWalk
CallbackMayRunLong
GlobalDeleteAtom
GetUILanguageInfo
GetAtomNameW
MapUserPhysicalPages
DuplicateHandle
HeapValidate
GetStringScripts
PrepareTape
GetSystemDefaultLocaleName
GetVersion
SetProcessMitigationPolicy
GetNamedPipeInfo
PostQueuedCompletionStatus
CancelWaitableTimer
IsValidCodePage
CloseThreadpoolCleanupGroup
CreateEventW
SetFileAttributesTransactedW
ConvertThreadToFiberEx
MultiByteToWideChar
CloseThreadpoolCleanupGroupMembers
ResolveLocaleName
GetConsoleMode
LoadPackagedLibrary
BuildCommDCBAndTimeoutsW
WritePrivateProfileStructW
GetTimeZoneInformation
LocalFileTimeToFileTime
ReadThreadProfilingData
SetConsoleScreenBufferInfoEx
GetTickCount64
BuildCommDCBW
LCMapStringEx
MoveFileWithProgressW
FlsSetValue
WaitForThreadpoolWaitCallbacks
EnumSystemLocalesEx
SetUserGeoID
CreateFileTransactedW
AttachConsole
GetCalendarInfoW
EscapeCommFunction
GetConsoleAliasesLengthW
TzSpecificLocalTimeToSystemTime
SetConsoleCursorInfo
GetFileAttributesExW
GetConsoleProcessList
AddResourceAttributeAce
SetFileInformationByHandle
GetMaximumProcessorGroupCount
FindNextVolumeMountPointW
WaitCommEvent
FillConsoleOutputCharacterW
ReadConsoleInputW
SetThreadpoolTimerEx
GetThreadUILanguage
SetEvent
FileTimeToSystemTime
GetNamedPipeHandleStateW
GetSystemFileCacheSize
GetCurrentThread
GetMailslotInfo
ReadConsoleOutputW
InitOnceComplete
TerminateThread
GetActiveProcessorGroupCount
GetNumaProximityNodeEx
LoadLibraryA
lstrcatW
GetApplicationRestartSettings
WaitForSingleObjectEx
SetWaitableTimerEx
DefineDosDeviceW
ReclaimVirtualMemory
GetFullPathNameTransactedW
EnumResourceNamesExW
GetCommState
GlobalFlags
DeleteFileW
InterlockedPushListSListEx
TransmitCommChar
GetSystemDEPPolicy
MoveFileTransactedW
WriteConsoleOutputAttribute
CreateThreadpoolCleanupGroup
GetProcessIoCounters
GetNativeSystemInfo
AllocateUserPhysicalPagesNuma
GetNumberFormatW
EnumResourceLanguagesW
GetSystemInfo
SetThreadpoolWait
QueryProcessCycleTime
ReadFileEx
CreateThreadpoolTimer
LoadLibraryW
HeapSetInformation
GetThreadIOPendingFlag
ScrollConsoleScreenBufferW
SetComputerNameW
DiscardVirtualMemory
FindResourceW
EnumDateFormatsExW
GetCurrencyFormatW
ClearCommError
FatalAppExitW
GetDefaultCommConfigW
GetCurrentDirectoryW
FillConsoleOutputAttribute
GetProcessPreferredUILanguages
SetStdHandle
UpdateResourceW
GetCurrentConsoleFontEx
CloseThreadpoolIo
SwitchToThread
FindNextChangeNotification
AddSIDToBoundaryDescriptor
SetVolumeMountPointW
GetNamedPipeServerProcessId
AddVectoredExceptionHandler
SetFirmwareEnvironmentVariableW
FindNextFileNameW
GetNamedPipeClientSessionId
IsThreadAFiber
LocalSize
GetThreadContext
SubmitThreadpoolWork
DeleteFileTransactedW
SetLocaleInfoW
GetWindowsDirectoryW
PeekConsoleInputW
WriteConsoleW
GetErrorMode
SetProcessDEPPolicy
Beep
GetProcAddress
UnregisterApplicationRestart
SetFilePointerEx
VirtualAllocEx
CreateMutexExW
UnregisterWaitEx
DebugActiveProcess
FindFirstFileNameTransactedW
HeapQueryInformation
GetTimeFormatW
MoveFileExW
GetOverlappedResultEx
LockFileEx
AcquireSRWLockShared
SetThreadStackGuarantee
GetFileSize
SetDefaultCommConfigW
ExitProcess
LCMapStringW
ReadProcessMemory
GetComputerNameW
SetProtectedPolicy
DisableThreadProfiling
SetConsoleCP
GetCurrentProcessId
EnumSystemLocalesW
GlobalMemoryStatusEx
CreateProcessW
IsValidLocale
GetModuleHandleW
CreateSemaphoreW
TransactNamedPipe
CopyFileW
GetProfileStringW
WideCharToMultiByte
CreateSymbolicLinkW
GetConsoleWindow
SetCommBreak
GetVolumePathNamesForVolumeNameW
GetLongPathNameTransactedW
CreateRemoteThread
DeleteBoundaryDescriptor
SleepConditionVariableSRW
VerifyVersionInfoW
GetThreadTimes
FreeUserPhysicalPages
CommConfigDialogW
GetFileMUIInfo
ConvertFiberToThread
GetSystemTimeAsFileTime
GetFileType
AddAtomW
DeleteTimerQueueTimer
GetSystemTime
GetFirmwareType
DeleteVolumeMountPointW
SetThreadErrorMode
VirtualFreeEx
CopyFileExW
CreateWaitableTimerExW
IsBadReadPtr
DebugBreak
SetProcessWorkingSetSize
CreateFileMappingW
BackupRead
GetTapeStatus
SetThreadPreferredUILanguages
MapViewOfFile
GetProcessPriorityBoost
GetSystemWindowsDirectoryW
SetThreadContext
FindNextVolumeW
SetFileValidData
IsValidLocaleName
lstrcmpiW
BackupSeek
GetProcessGroupAffinity
GetNLSVersion
GetStringTypeW
HeapUnlock
InitializeSListHead
CreateIoCompletionPort
FindNextStreamW
WaitNamedPipeW
FlsFree
SetCommState
SetDllDirectoryW
AllocConsole
ConvertThreadToFiber
lstrcmpW
EnumDateFormatsW
WriteConsoleOutputW
GetDllDirectoryW
SetConsoleTitleW
InitializeSynchronizationBarrier
LocalUnlock
GetFirmwareEnvironmentVariableW
MoveFileW
VirtualQuery
RegisterApplicationRestart
IsWow64Process
CheckNameLegalDOS8Dot3W
GetVolumeInformationByHandleW
GetDriveTypeW
OpenThread
LoadLibraryExW
IsDebuggerPresent
QueryDepthSList
SetFileCompletionNotificationModes
WriteConsoleOutputCharacterW
CreateTimerQueue
SetUnhandledExceptionFilter
IsBadStringPtrW
GetCurrentConsoleFont
RegisterApplicationRecoveryCallback
GetProcessHeap
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
GetACP
FindNextFileW
HeapReAlloc
ReadConsoleW
GetFileSizeEx
GetConsoleOutputCP
FlushFileBuffers
CloseHandle
HeapAlloc
GetUserDefaultLCID
GetLocaleInfoW
HeapFree
GetModuleHandleExW
GetModuleFileNameW
GetStdHandle
FreeLibrary
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
SetLastError
GetLastError
RaiseException
GetCurrentProcess
IsProcessorFeaturePresent
UnhandledExceptionFilter
QueryPerformanceCounter
DecodePointer
EncodePointer
DeleteCriticalSection
HeapSize
user32
IsWindowVisible
GrayStringW
InflateRect
DlgDirListW
GetMenuItemCount
CharUpperW
UnregisterHotKey
ScrollDC
IsCharLowerW
GetPhysicalCursorPos
DdeAccessData
GetSystemMetrics
GetScrollInfo
LoadStringW
IsWindow
GetRawInputDeviceInfoW
DispatchMessageW
DdeGetLastError
CreateCaret
UnregisterPowerSettingNotification
SetCoalescableTimer
ValidateRect
TrackMouseEvent
DdeDisconnectList
SetMenuContextHelpId
CreateDesktopW
MessageBoxA
SetMenu
EnumWindows
IsRectEmpty
IsImmersiveProcess
EnumDisplayDevicesW
LoadCursorW
GetClipboardSequenceNumber
EndDeferWindowPos
InsertMenuW
SetClipboardData
SetWindowLongW
GetComboBoxInfo
AppendMenuW
GetWindowDisplayAffinity
AddClipboardFormatListener
GetDisplayAutoRotationPreferences
ShowCaret
PostQuitMessage
EnumDisplaySettingsW
DdeGetData
CreateDialogIndirectParamW
SetProcessDPIAware
UserHandleGrantAccess
ScrollWindow
DdeFreeStringHandle
UnregisterDeviceNotification
LoadImageW
FillRect
Sections
.code Size: 131KB - Virtual size: 130KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 115KB - Virtual size: 118KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.odata Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ