Static task
static1
Behavioral task
behavioral1
Sample
f9fc029e0c6bc746fdc690f277deb15685720ce15cea4e2cf05f53519efd28c9.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
f9fc029e0c6bc746fdc690f277deb15685720ce15cea4e2cf05f53519efd28c9.exe
Resource
win10v2004-20220812-en
General
-
Target
f9fc029e0c6bc746fdc690f277deb15685720ce15cea4e2cf05f53519efd28c9
-
Size
94KB
-
MD5
4ddd6be8cb22fe19e5e43d180b51c1f0
-
SHA1
b6e6428dbea3bf76be79a000176e6c0e2442cbbb
-
SHA256
f9fc029e0c6bc746fdc690f277deb15685720ce15cea4e2cf05f53519efd28c9
-
SHA512
ae2a9f56b02a32c8157b505178997b218f9dba0b0162870e7c1e21cffc6b2f078be89ba24593d35dfb2261acac859d1b408ff5cd00cfafe46bee7deae620e06d
-
SSDEEP
1536:7KeC2lmDGtJpTiYBjXpD6EbOv3NmlksYCwTlh6KR6W+Q/txABSoChTfq9kgO2Xfq:7KQltJpTiYn60g3AlJhSdhtxABSoChTB
Malware Config
Signatures
Files
-
f9fc029e0c6bc746fdc690f277deb15685720ce15cea4e2cf05f53519efd28c9.exe windows x86
3f6d55f35469fd56355975b0fa37079c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersionExW
CreateFileW
CloseHandle
WriteFile
GetSystemDirectoryW
GetProcAddress
GetModuleHandleW
FreeLibrary
LoadLibraryW
GetPrivateProfileIntW
lstrlenW
InitializeCriticalSection
DeleteCriticalSection
GetModuleFileNameW
GetCommandLineA
GetWindowsDirectoryW
lstrcatW
DeleteFileW
CreateDirectoryW
FindFirstFileW
FindNextFileW
FindClose
OutputDebugStringA
CreateFileA
GetModuleFileNameA
ExitProcess
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetVersionExA
GetStartupInfoA
GetModuleHandleA
GetSystemTimeAsFileTime
user32
DefWindowProcW
RegisterClassExW
CreateWindowExW
GetDesktopWindow
DestroyWindow
CharNextW
shell32
ShellExecuteExA
ole32
CoUninitialize
CoTaskMemFree
CoInitialize
CoCreateInstance
oleaut32
SysStringLen
SysFreeString
SysAllocString
msvcr71
_acmdln
?terminate@@YAXXZ
??1type_info@@UAE@XZ
__security_error_handler
??0exception@@QAE@XZ
??1exception@@UAE@XZ
_CxxThrowException
__CxxFrameHandler
??0exception@@QAE@ABV0@@Z
_controlfp
_except_handler3
__set_app_type
??3@YAXPAX@Z
memcpy
memmove
wcslen
strlen
memset
free
??2@YAPAXI@Z
strstr
wcscat
__dllonexit
_onexit
_c_exit
_exit
_XcptFilter
_ismbblead
_cexit
exit
printf
_amsg_exit
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
shlwapi
PathFileExistsW
PathIsDirectoryW
Sections
.text Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 72KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE