Static task
static1
Behavioral task
behavioral1
Sample
9bd59684451b100e18bdd339edbe284abbddc0d9dd1d9bc4e0f9132434888c13.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9bd59684451b100e18bdd339edbe284abbddc0d9dd1d9bc4e0f9132434888c13.exe
Resource
win10v2004-20220901-en
General
-
Target
9bd59684451b100e18bdd339edbe284abbddc0d9dd1d9bc4e0f9132434888c13
-
Size
374KB
-
MD5
612cb31da80de169dfee7cc3ee17aec0
-
SHA1
de5b7efdf81928fb4cea0cbc1791eb0b9091e4ff
-
SHA256
9bd59684451b100e18bdd339edbe284abbddc0d9dd1d9bc4e0f9132434888c13
-
SHA512
884569857c884734d5ffe40922b1fef873782638403e0f0af2e9913c7e28a6f7aa0c32d0557f2629e70f06c363abb4ed28fe8e18f2b592adc1141eb5cdd9ac25
-
SSDEEP
6144:9v22X4W1nkg26yeRbxBZI9vbD4B5yKI9MVKJBC/9L12youYxzVX1BHnTCe5+EgGj:R1nbVxBS9vaneMVKJBC/9L19oFzGecVO
Malware Config
Signatures
Files
-
9bd59684451b100e18bdd339edbe284abbddc0d9dd1d9bc4e0f9132434888c13.exe windows x86
c5be99196a6c1865f2d20626faa31615
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
crypt32
CryptBinaryToStringW
kernel32
GetProcAddress
LoadLibraryA
RtlUnwind
VirtualProtect
HeapSize
shlwapi
PathAppendA
crtdll
__GetMainArgs
exit
raise
signal
advapi32
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 40B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 134KB - Virtual size: 134KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 748B - Virtual size: 748B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 268B - Virtual size: 268B
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ