Static task
static1
Behavioral task
behavioral1
Sample
0912b182e48543080e6392658f56a564690d58788c7f7c905effa8e5e4167699.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0912b182e48543080e6392658f56a564690d58788c7f7c905effa8e5e4167699.exe
Resource
win10v2004-20220812-en
General
-
Target
0912b182e48543080e6392658f56a564690d58788c7f7c905effa8e5e4167699
-
Size
66KB
-
MD5
61b0277303976c2bb3d27a100787c194
-
SHA1
3b23ab16fa7137bc399ab537bab42000fb79ec6e
-
SHA256
0912b182e48543080e6392658f56a564690d58788c7f7c905effa8e5e4167699
-
SHA512
df4997f999f2a3141d1bed6038c319c9139cfe64a61e3cf361636af290da37eb8a5af97044d7ba1d3fc5faa75cc7e22164df6308b440fb0e203e2d26d8c634af
-
SSDEEP
1536:qs/iYvnnkx/fv2faimpgH21j3M5fd1gCYN:/4fvQamSMZfs
Malware Config
Signatures
Files
-
0912b182e48543080e6392658f56a564690d58788c7f7c905effa8e5e4167699.exe windows x86
aa513a27cf749b2f9152e5b4bcee0a72
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetConsoleTitleA
GetDiskFreeSpaceW
GetExitCodeThread
WaitForMultipleObjects
GetModuleHandleA
GetVolumePathNameA
lstrcmpiW
ReleaseSemaphore
GetFileAttributesW
OpenMutexA
lstrcmpW
GetFullPathNameA
GetCurrentDirectoryA
GetEnvironmentVariableA
GetPrivateProfileSectionW
CloseHandle
CreateDirectoryW
HeapCreate
CreateEventW
CloseHandle
CloseHandle
GetFullPathNameA
certmgr
DllRegisterServer
DllCanUnloadNow
DllUnregisterServer
DllGetClassObject
Sections
.text Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_WRITE
.zdata Size: 57KB - Virtual size: 57KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ