Static task
static1
Behavioral task
behavioral1
Sample
9cc5c34cdebd52981aa6a7939915ef3227c8c20cd900e8b56fc88f8265cbc478.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9cc5c34cdebd52981aa6a7939915ef3227c8c20cd900e8b56fc88f8265cbc478.exe
Resource
win10v2004-20220812-en
General
-
Target
9cc5c34cdebd52981aa6a7939915ef3227c8c20cd900e8b56fc88f8265cbc478
-
Size
54KB
-
MD5
0a59fac4fd6ac63c9e06e7cf7ab6b983
-
SHA1
f082d551c50dd84ed12551220b9668eaf439762d
-
SHA256
9cc5c34cdebd52981aa6a7939915ef3227c8c20cd900e8b56fc88f8265cbc478
-
SHA512
a98774d0de7ae07e431f36efecd8a8ec903c3d9630a41b5c44e752fd44edf9aa8db7fedfbdd1bf9da74e8238488628ade588e98acb6140c9373d43fc107aabe7
-
SSDEEP
768:aia+6Z2NTBFcH7MwZGQhrbp930NScD05sUvPRnAGENSb9eqdlQCmtLdxxNxsS:fi2pYH7murdkY5sEnENOdGtNxd
Malware Config
Signatures
Files
-
9cc5c34cdebd52981aa6a7939915ef3227c8c20cd900e8b56fc88f8265cbc478.exe windows x86
827381aab171066fc95bbb30ea3d221e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
WriteConsoleA
GetStartupInfoA
GetEnvironmentVariableA
GetFileAttributesW
lstrlenA
SetLastError
GetModuleHandleA
EnumResourceTypesA
HeapDestroy
GetDriveTypeW
GetCommandLineA
GetTimeFormatW
DeleteFileA
GetCommandLineA
HeapCreate
GetConsoleTitleA
CreateEventW
CloseHandle
GlobalFlags
advapi32
InitializeSid
IsValidSid
IsValidSid
IsValidSecurityDescriptor
IsValidSid
IsValidSid
RegQueryValueW
IsValidAcl
RegCreateKeyExW
IsValidSid
CreateProcessAsUserW
RegDeleteValueA
RegEnumKeyA
cnvfat
ConvertFAT
ConvertFAT
ConvertFAT
ConvertFAT
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 10B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 48KB - Virtual size: 75KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
wsxsmck Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE