Static task
static1
Behavioral task
behavioral1
Sample
9c84aeac7282b5e1eef015121790712a575c44a364a07de9901518cea0b84265.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9c84aeac7282b5e1eef015121790712a575c44a364a07de9901518cea0b84265.exe
Resource
win10v2004-20220901-en
General
-
Target
9c84aeac7282b5e1eef015121790712a575c44a364a07de9901518cea0b84265
-
Size
240KB
-
MD5
4f11eaf430cb4757b738a655b743c6a0
-
SHA1
6e3910c8843d78c6a6ae4aeab29b8fb2cb48e6ee
-
SHA256
9c84aeac7282b5e1eef015121790712a575c44a364a07de9901518cea0b84265
-
SHA512
457aa76b1fa5c36fd953086c9f4daca694080a08ed41a67f16aac67414f5c8151920f51c61bbe8f2c901781aa366448a080c116d343e03f117697e5ee0715a4d
-
SSDEEP
6144:Ap9Q9h6obXkcg9cSOEt5zpaiRhcuGE07v6uFA7:A7Qj3kSwNxRhTKj6OA7
Malware Config
Signatures
Files
-
9c84aeac7282b5e1eef015121790712a575c44a364a07de9901518cea0b84265.exe windows x86
4d0c1c2fd73ed44b886eaa55371594f4
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
nfc
nfc_initiator_transceive_bytes
nfc_connect
nfc_initiator_init
nfc_configure
nfc_perror
nfc_initiator_select_passive_target
nfc_disconnect
msvcr90
fread
printf
fopen
tolower
strcmp
exit
memcpy
sscanf
strcpy
strtok
strncpy
malloc
_amsg_exit
__getmainargs
_cexit
fclose
_XcptFilter
__initenv
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
_encode_pointer
__set_app_type
_crt_debugger_hook
?terminate@@YAXXZ
_unlock
__dllonexit
_lock
_onexit
_decode_pointer
_except_handler4_common
_invoke_watson
_controlfp_s
memset
memcmp
__iob_func
fflush
fwrite
_exit
kernel32
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
UnhandledExceptionFilter
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
\fJ# Size: 223KB - Virtual size: 224KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE