Static task
static1
Behavioral task
behavioral1
Sample
9ff430ca0c4942426345a1162f5769c050f9d80785a6a9e2b559eca491613e55.exe
Resource
win7-20250207-en
General
-
Target
9ff430ca0c4942426345a1162f5769c050f9d80785a6a9e2b559eca491613e55
-
Size
8.9MB
-
MD5
29689832b64151b256c7a5952e29ce57
-
SHA1
0ad2ce251c6aa5d2d3a6798b3b9d6186c312b9c7
-
SHA256
9ff430ca0c4942426345a1162f5769c050f9d80785a6a9e2b559eca491613e55
-
SHA512
e4a42739826bccafc4186168061b8b2cc18bb7ba2fa29b7aab586a35e613703ff8b7159f9439aac31a819a6fb7d84e543b04f5c4273c1e8d8811695e576a0ff5
-
SSDEEP
196608:7DYkkqfPyOWe3ltFCNTr3tbYWFLg9Z3D7JkaPoq0fmrY1Er6K5gS:7DDkqyc1tgdtovzWagdmrY1tcgS
Malware Config
Signatures
Files
-
9ff430ca0c4942426345a1162f5769c050f9d80785a6a9e2b559eca491613e55.exe windows:5 windows x86 arch:x86
eabfd457d38610950d80f8b4885aa9b4
Code Sign
86:09:86:38:1d:15:a2:be:08:76:c8:6d:1c:3d:c5:b4:e5:97:a8:5dSigner
Actual PE Digest86:09:86:38:1d:15:a2:be:08:76:c8:6d:1c:3d:c5:b4:e5:97:a8:5dDigest Algorithmsha1PE Digest MatchestrueHeaders
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
msvfw32
DrawDibDraw
avifil32
AVIStreamGetFrame
winmm
midiStreamRestart
ws2_32
inet_ntoa
rasapi32
RasGetConnectStatusA
kernel32
GetVersion
GetVersionExA
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
GetSysColorBrush
CharUpperBuffW
gdi32
CreateRectRgn
msimg32
GradientFill
winspool.drv
ClosePrinter
comdlg32
GetFileTitleA
advapi32
RegCreateKeyExA
shell32
DragAcceptFiles
ole32
RevokeDragDrop
oleaut32
SafeArrayGetUBound
comctl32
ImageList_DragMove
wininet
InternetCanonicalizeUrlA
Exports
Exports
Pd�[�s��t��d{3�D�P�]�B�j%,�qʼnГհE������gI*�VT���+��Y�c%mS�A�Ha����|o�$�y��&x.F�_�^��P�Z:��Q��Ct��Zr�É��@ާ���dpY�.E�9I.�,����*T��dq.ƪ$�`#,�S�FF4��A��C����R.���-6[��4�m��N�����"� �����bbs��b����b�AV��40�bQ��d%F3���ơ�E�R��Qr�@\A6�&�9�%?4�s��`��CZN�K�0�<�"K]/R�0o`+���!�i�� ʌ0I}�����%�#KK>���:"�b����G����A.0���@���Ƽ�W̑ �H�9����y���(cAc�m�� <��PM_`���������{�H|Pp��'��n]����k��S�p�V?�\�5NQKXiB6�?ܬ.�c�����=|�㜎yj�X��X��v�,fl���,� ��>e���'�(V�>�_��@��4�-�Q�K��5�ZM���O� ƕ켕�'�/!���T��)���ӓ0C4~�LM��} ��W��=牌�ʈ�0kV@�Q>`~��Ż�d�nVj������DlPQ<�(��.kE�3����ʦ� ����?{k��"�Hƕi 1>n"̑"�9�wU�62ݝ��Y�1��cZ�]���<"��Kا�0��sg�� t_wIP#��x*�{���e�3�b���7L$��}^�>.\����ظ�}{M�Y��e�t�<�����NG�u������`z�|�{�a���Ҽ5o;q4i�I�UT�n��(��'3t@,4�%Vy;����@��q��J�@�[�[Y�o]�*���=dxî�D��g�H�2�PR�i�����X�q|̍dF��b��<�s.}�V6��ڳDH��2���Ou�2 ����*���p������c�;�@�p���j����\��G���⯃��V�p�ɋ�4Y-����t���KM��duY������_��R���*��W��6s�j_à���o�ı��~$��C{i�y�&���.���ll��.J�`�YT��b/�`�͞ �f�d-G~ �NO~/�m�[5��d�D���,x��OQ��D�t-^f��W�]�j�K+�=��~y��26Y�0.h��wM��Q5�ɉԽ(!��jy:9��"D�Z>��5�:��Z'��{Gj�IK���y7vn]�w���`5��#��4]r*��� ���kp��Dm�{ 59�������ڔ��2 HʟXj�jv�H��{_]Դ� K>�UD)����u&ck�'���W<���4�q�!����o�{�Q&ͤ�{�Hi��3 ��ڎٸ���8Wv$��u��a�o3���w��jK�@��7����>50��'���� �g��|Y�{_������o�1��N��6RY\غ#˼*W���=�ٍ���݇R/R���L]'E(��Z^�W+"wsg~�IE�����]B<΄���S2Fo&_6oa[�'��^��%��_�%�몴��$�I�m.�x �^�-�����Z��X�O-�0���벹D��Ο��yZ�r��OYl�'W�M���ӳ�~���D)&�L�l.Kf5�w]�;V2\���)<��������k[:���L낔�rq����=r/!���`���4����+�\/��"�Ό��w#�?�7�%�;���s]��tM��2��-��O}��`�`B��&��s.�?q���s�LIP@�rUF��@���]�/�)9T1��I����Vc^��D�� 8l��}1�34C��J��8��FvWt������:�M�(N�4���˟Z ��A��9�s?摲x�k�@�Q�����O~?f����,��:����@v3�CQ_�� ��W�s���� ����i�-/C��K)3t���5���'d�}�'��NC8uYD�����(#V��I�0�V�P�w8��I�8����~�����s��5���1����b� ���D��1g�N3� ���WwS���FO�8 ��!���`>�'��M ;����;w �!Ah�]_�쬻��'�X�'Z B&d���KT7���X]Dn&,Z��H`/H��PW��;�d����˾��<�������9��D�� Ωv0���o�I��*�ʳ�b�?Y��\L�bX�uD���Q�75�B�@wt�aҦ�������W���>�w���g������R���ĕ₀�� �#d4�u4;�1rj@m�8���}�(x�c�@� Ϫ�j����@v���� $��&��M1 ܿp�ʯc��˙��0�S���p����o�'j_P��]���X�KNdO���8����a��T>�&?4��C��p$�@Z.�1������[��b|�[�gj�M�aL�����+^Mzf#)��"*'�4{`.�۵��fH.`!�z��"*�L�� ���ʋ��\�����$�f�(}�x+/��vE�J�_�l j�Xs<5���^ZH�}�������9e�b�qE��թ(�G�v�q既{�|<R���ߔ�����j.W-�g��S��ʖg^����[n@��r`)��m�T�J�"9�j�wk4;Q�Z#_�g!���̻����r������.��Ey�q��.��ǜ����?��B��V2�֪��&N}��9DJB�����R������5&ʁ�П��M�y��4�Fzl�`t�^��&Lq<�W(:��c-.Ra:�U��͑!�b�o����.�ː�'R��=L?�s��R��L-dk�'S���R%��(��%�uF:�M���n{ 윱��$ŧ2����3'8KЄ���ч���st�"kNX ��d�������Q�(�����9��ƨ0"-�J��o�m~d�U��Q)�_��ekh��/�L��c+6d�����%@Ɓ�66j�{L�������F��_����5IIWj���9��E��ѭ��� >����Sn�~���1|��`X`b�gs@i���~ Xx ��<N�-���m��,]�/��w�Q%~RK�<�YaD���7i�ozv������j�.I��B?Tǔ6�(�C�u
Sections
.text Size: - Virtual size: 1.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 5.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 637KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.JustJ0 Size: - Virtual size: 4.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.JustJ1 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.JustJ2 Size: 8.8MB - Virtual size: 8.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 72KB - Virtual size: 70KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ