Static task
static1
Behavioral task
behavioral1
Sample
9ae892a7c46c079feeb9cceda466b80bb01ec7c51189ac1c4b3155c7acfe2e14.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
9ae892a7c46c079feeb9cceda466b80bb01ec7c51189ac1c4b3155c7acfe2e14.exe
Resource
win10v2004-20220812-en
General
-
Target
9ae892a7c46c079feeb9cceda466b80bb01ec7c51189ac1c4b3155c7acfe2e14
-
Size
384KB
-
MD5
ff7d99731332c7e7ad985972d0f7849a
-
SHA1
8e8ad2357808647e219045199c389dd11b8b0d51
-
SHA256
9ae892a7c46c079feeb9cceda466b80bb01ec7c51189ac1c4b3155c7acfe2e14
-
SHA512
f7f7fcdffc9b17d561e1e980a805f3cf5694aff2df0753497f71b9526806d04570dd24618334e4f15413f2770c75cae56a6b9fcccf4d8214076f9bf4c703cc25
-
SSDEEP
6144:arTuEDkmIvSyL5fZ3HG2BiTUXPQ2DRYTp1xyxfkIWWSVokkc:ar6EDkm+SYfZ3FfQOYTp+JSVHd
Malware Config
Signatures
Files
-
9ae892a7c46c079feeb9cceda466b80bb01ec7c51189ac1c4b3155c7acfe2e14.exe windows x86
61348da59d4fb853260d70725af7df43
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
VirtualAlloc
GetProcAddress
WaitForSingleObject
SetEvent
ReleaseSemaphore
GetProcessHeap
OpenMutexA
GetSystemTime
ResumeThread
VirtualFree
GetLastError
HeapReAlloc
InterlockedExchange
GetSystemInfo
VirtualProtect
GetLocaleInfoA
RtlUnwind
TerminateThread
VirtualLock
GetStringTypeW
GetStringTypeA
GetStartupInfoA
GetCommandLineA
GetVersionExA
HeapFree
ExitProcess
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
HeapAlloc
LoadLibraryA
GetACP
GetOEMCP
GetCPInfo
HeapSize
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringA
MultiByteToWideChar
LCMapStringW
VirtualQuery
user32
GetDesktopWindow
LoadBitmapA
LoadIconA
gdi32
SelectObject
msvfw32
ICRemove
Sections
.text Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 332KB - Virtual size: 701KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ