Static task
static1
Behavioral task
behavioral1
Sample
9b2ca3cfd192b61600fabd1b9315ef3405b7f78d95ffff563aaa5836bb3f92d4.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
9b2ca3cfd192b61600fabd1b9315ef3405b7f78d95ffff563aaa5836bb3f92d4.exe
Resource
win10v2004-20220812-en
General
-
Target
9b2ca3cfd192b61600fabd1b9315ef3405b7f78d95ffff563aaa5836bb3f92d4
-
Size
834KB
-
MD5
0607fc1cd743b9ebaa8ab7b20490faa8
-
SHA1
84afe07955ccae3eceebd3d647d4ebb24ec1408a
-
SHA256
9b2ca3cfd192b61600fabd1b9315ef3405b7f78d95ffff563aaa5836bb3f92d4
-
SHA512
61376ecf7755530accaafd0e41639ad443631eafddb3e36a5801238398d49c15fbd9d8b8ed4e11e16388425d13cdad15f5ebb95e2fe025da15504681c8f1f322
-
SSDEEP
24576:bjsbPKQT08N3qsjuh3ti2TBvrol4KP5GiWK/z7:UbPKi08yi2TNmbAiF
Malware Config
Signatures
Files
-
9b2ca3cfd192b61600fabd1b9315ef3405b7f78d95ffff563aaa5836bb3f92d4.exe windows x86
cdb5ffffc536374e733fb24796ca0afc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcr71
strcspn
_errno
_vsnprintf
abs
fscanf
rename
_access
strspn
fputc
fputs
localtime
_makepath
realloc
fseek
rewind
ftell
calloc
fwrite
fread
_mkdir
putc
getc
_sys_errlist
_close
_chsize
difftime
mktime
_findfirst
_getpid
_strcmpi
_snprintf
_memicmp
tolower
_fullpath
remove
_searchenv
gmtime
_c_exit
_exit
_XcptFilter
_cexit
exit
__p___initenv
_amsg_exit
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
__dllonexit
_onexit
_controlfp
_findnext
_splitpath
atol
_ltoa
_stricmp
_stat
_unlink
labs
_ftol
memcmp
srand
rand
strstr
memmove
strncpy
mblen
wcsftime
wcstok
wcslen
wcsstr
wcsspn
wcscspn
wcscpy
wcsncpy
wcscmp
wcsncmp
wcschr
wcsrchr
wcscat
wcsncat
wcstoul
wcstol
fgetws
fgetwc
towupper
iswctype
_mbsinc
wcstombs
wctomb
mbstowcs
mbtowc
setlocale
_setmbcp
strtol
_getcwd
toupper
strtok
vsprintf
setbuf
ctime
strrchr
vfprintf
__mb_cur_max
_isctype
_pctype
atoi
fflush
getenv
_putenv
_strupr
time
strncat
strcat
fopen
fclose
malloc
strcpy
free
_iob
fprintf
strcmp
printf
fgets
strncmp
sscanf
strchr
sprintf
memset
memcpy
_utime
strlen
_itoa
kernel32
GetPrivateProfileIntA
GetPrivateProfileStringA
WriteFile
ReadFile
WinExec
SetLastError
CreateProcessA
QueryPerformanceCounter
QueryPerformanceFrequency
GetFileTime
SetFileTime
SetFileAttributesA
FormatMessageA
FindFirstFileA
FindNextFileA
FindClose
GetFullPathNameA
DeleteFileA
GetCurrentDirectoryA
GetSystemDirectoryA
CreateMutexA
WaitForSingleObject
ReleaseMutex
GetEnvironmentVariableA
WideCharToMultiByte
MultiByteToWideChar
OpenFile
CreateFileMappingA
MapViewOfFile
GetFileSize
UnmapViewOfFile
GetModuleFileNameA
GetLogicalDriveStringsA
GetDriveTypeA
GetVolumeInformationA
LocalAlloc
lstrcmpA
lstrlenA
LocalFree
GetVersion
GetModuleHandleA
GetTickCount
GetCurrentProcess
GetProcessAffinityMask
SetThreadAffinityMask
GetCurrentThread
QueryDosDeviceA
GetLastError
DefineDosDeviceA
LoadLibraryA
GetProcAddress
FreeLibrary
GetVersionExA
DeviceIoControl
CreateFileA
CloseHandle
GetSystemTime
user32
MessageBoxA
GetSystemMetrics
SetTimer
KillTimer
advapi32
CryptReleaseContext
RegQueryInfoKeyA
RegEnumValueA
RegSetValueExA
SetFileSecurityA
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
GetUserNameA
RegOpenKeyA
RegSetKeySecurity
RegQueryValueA
RegCreateKeyExA
RegSetValueA
RegEnumKeyExA
RegOpenKeyExA
RegCloseKey
RegQueryValueExA
CryptGenRandom
CryptAcquireContextA
RegCreateKeyA
netapi32
Netbios
ws2_32
inet_addr
WSAStartup
getpeername
recv
send
connect
socket
bind
getsockname
closesocket
WSAGetLastError
rpcrt4
UuidCreate
Sections
.text Size: 556KB - Virtual size: 555KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 168KB - Virtual size: 289KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 98KB - Virtual size: 98KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE