Static task
static1
Behavioral task
behavioral1
Sample
91a6a288d6a2c99be0cfa15a74a5809070571fdd3366cbcf776f5ff1515a4888.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
91a6a288d6a2c99be0cfa15a74a5809070571fdd3366cbcf776f5ff1515a4888.exe
Resource
win10v2004-20220901-en
General
-
Target
91a6a288d6a2c99be0cfa15a74a5809070571fdd3366cbcf776f5ff1515a4888
-
Size
183KB
-
MD5
76aef3fde72dd9497ca5670e87f92d85
-
SHA1
6377a7cc926fb554332b1cd32813b3deb111b8b9
-
SHA256
91a6a288d6a2c99be0cfa15a74a5809070571fdd3366cbcf776f5ff1515a4888
-
SHA512
a57368211e80add705cb04cd337e760ef47ca653c837c84ad90d7bf4b6f7a86cfb38ef1cc0ba082e174bd3b2133ed526d63e18ce1d6b1b95c3b79a6a2c88adbd
-
SSDEEP
3072:Z0Hp1YkfgU1skOiVAZLb2Ea3USBoEke15ooc7An5m1ixPrX6WfmblEdzBhlg:arYg7VKbyoEn5Esn5m1ixPrqWOblEdzJ
Malware Config
Signatures
Files
-
91a6a288d6a2c99be0cfa15a74a5809070571fdd3366cbcf776f5ff1515a4888.exe windows x86
0b0820bbd2540ed0ab1e725fcd55cf37
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mprapi
MprConfigServerDisconnect
MprConfigServerConnect
MprConfigGetFriendlyName
ole32
CoGetMalloc
CoTaskMemFree
ProgIDFromCLSID
StringFromCLSID
kernel32
FlushFileBuffers
CreateThread
CreateDirectoryW
GetCalendarInfoA
LoadLibraryExW
CreateFileW
GetVersionExW
GetExitCodeProcess
MapViewOfFile
MoveFileExW
WaitForSingleObject
GetProcAddress
UnmapViewOfFile
CreateProcessW
CreateFileMappingA
TlsSetValue
HeapAlloc
SetEvent
CreateFileA
EnumResourceNamesA
TlsFree
GetEnvironmentVariableW
TlsGetValue
FindFirstFileW
GetConsoleCP
HeapFree
TlsAlloc
GetConsoleMode
GetModuleHandleA
GetModuleHandleW
GetProcessHeap
InterlockedIncrement
GetVersionExA
SetLastError
WriteConsoleW
ExitProcess
GetTempPathW
GetLastError
Sections
.text Size: 101KB - Virtual size: 101KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: 78KB - Virtual size: 78KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ