Static task
static1
Behavioral task
behavioral1
Sample
b9ec08e1222ad14118832e478e29baac288b4f881c4d5be0ce831c44b3239978.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b9ec08e1222ad14118832e478e29baac288b4f881c4d5be0ce831c44b3239978.exe
Resource
win10v2004-20220901-en
General
-
Target
b9ec08e1222ad14118832e478e29baac288b4f881c4d5be0ce831c44b3239978
-
Size
121KB
-
MD5
6568a99de12e6f53375f15af6f14bdb8
-
SHA1
244179b20812eb8f4b5a7e5004acdd603c883b4a
-
SHA256
b9ec08e1222ad14118832e478e29baac288b4f881c4d5be0ce831c44b3239978
-
SHA512
6a94d7a5ec45f87b59608e76bfd658901f9bb10c569ef19286de7d9c637775b63ff13ff7ce25b1ad9840b57a199bb07b249267bef76700df4089e5959005bb1a
-
SSDEEP
3072:rsOosqLQiQC9yRhuyMMqaCujxyH+/A5J93FB:vKoRhiRaCc2II91B
Malware Config
Signatures
Files
-
b9ec08e1222ad14118832e478e29baac288b4f881c4d5be0ce831c44b3239978.exe windows x86
0c8448d3c6a1ca179822a9fc9d000588
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
InterlockedExchange
GetModuleHandleA
GetModuleFileNameA
GetWindowsDirectoryA
CompareStringA
LoadLibraryA
GetLastError
SetLastError
GetSystemDirectoryA
FreeLibrary
advapi32
RegCloseKey
xprt5
?CompareNoCase@TBstr@XPRT@@QBEHPBG@Z
?TestAccess@TFile@XPRT@@SA_NPBGI@Z
??0TBstr@XPRT@@QAE@PBDPBG@Z
?Right@TBstr@XPRT@@QBE?AV12@H@Z
?GetLength@TBstr@XPRT@@QBEHXZ
??0TBstr@XPRT@@QAE@PBG@Z
?TrimLeft@TBstr@XPRT@@QAEAAV12@XZ
?TrimRight@TBstr@XPRT@@QAEAAV12@XZ
?Left@TBstr@XPRT@@QBE?AV12@H@Z
?ReverseFind@TBstr@XPRT@@QBEHG@Z
??0TBstr@XPRT@@QAE@ABV01@@Z
??1TBstr@XPRT@@QAE@XZ
kSystemEncoding
?Append@TBstr@XPRT@@QAEAAV12@PBDPBG@Z
?Append@TBstr@XPRT@@QAEAAV12@G@Z
?Append@TBstr@XPRT@@QAEAAV12@ABV12@@Z
?Assign@TBstr@XPRT@@QAEAAV12@PBG@Z
?Assign@TBstr@XPRT@@QAEAAV12@ABV12@@Z
?GetString@TBstr@XPRT@@QBEPBGXZ
?GetAt@TBstr@XPRT@@QBEGH@Z
?Find@TBstr@XPRT@@QBEHGH@Z
msvcrt
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__wgetmainargs
_wcmdln
exit
_XcptFilter
_exit
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 276B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE