Static task
static1
Behavioral task
behavioral1
Sample
8a9677e876d8b9b5e1101a8a2c0d6c1ff3687522b5ddce7640699f7e86fa591f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
8a9677e876d8b9b5e1101a8a2c0d6c1ff3687522b5ddce7640699f7e86fa591f.exe
Resource
win10v2004-20220901-en
General
-
Target
8a9677e876d8b9b5e1101a8a2c0d6c1ff3687522b5ddce7640699f7e86fa591f
-
Size
212KB
-
MD5
6ef620803209fcd740c391ab9834bc20
-
SHA1
c3d327b4855078ca0e83750c857ff4a3cf7d6eb1
-
SHA256
8a9677e876d8b9b5e1101a8a2c0d6c1ff3687522b5ddce7640699f7e86fa591f
-
SHA512
d800c4826d64e598e85cb905d484eee7b6c510cb27647cda297d4dd2740c3205719c77fa10f819842542ee6048f5a6b150aabf401f9c66a6f4256924d0ceae9b
-
SSDEEP
6144:Ei6Iad5gSE0ReIWlxMy1iCQprKwWjKkPWr:Eiw5gzjrfBgfWjKN
Malware Config
Signatures
Files
-
8a9677e876d8b9b5e1101a8a2c0d6c1ff3687522b5ddce7640699f7e86fa591f.exe windows x86
ac0b7cac2e0bd6b1b6faa1b0fdd28e15
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetUnhandledExceptionFilter
GetLocalTime
GetOEMCP
GetCurrentProcess
GetVolumeInformationA
lstrlenA
WideCharToMultiByte
MultiByteToWideChar
HeapFree
CloseHandle
GetCurrentProcessId
CreateFileA
LockResource
QueryPerformanceCounter
GetProcessHeap
lstrcpyA
FindResourceA
GetLocaleInfoW
SystemTimeToFileTime
lstrcmpA
GetTickCount
LoadLibraryW
HeapAlloc
SetLastError
QueryDosDeviceA
GetSystemTimeAsFileTime
scecli
SceAppendSecurityProfileInfo
SceAddToNameStatusList
SceAddToObjectList
SceAnalyzeSystem
SceCloseProfile
SceBrowseDatabaseTable
schannel
MakeSignature
QueryContextAttributesW
QuerySecurityPackageInfoA
QueryContextAttributesA
InitializeSecurityContextW
QuerySecurityPackageInfoW
advapi32
RegOpenKeyExA
RegQueryValueExA
RegQueryValueExW
RegCloseKey
Sections
.text Size: 143KB - Virtual size: 143KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 56KB - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 2.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rcrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ