Static task
static1
Behavioral task
behavioral1
Sample
9ecf060b37144fde780ff223abaf7de4e7a69f2877863a5565098c02b589ea5d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9ecf060b37144fde780ff223abaf7de4e7a69f2877863a5565098c02b589ea5d.exe
Resource
win10v2004-20220812-en
General
-
Target
9ecf060b37144fde780ff223abaf7de4e7a69f2877863a5565098c02b589ea5d
-
Size
164KB
-
MD5
7794e2264c37aad2d5ac17959c1ed397
-
SHA1
07daca4ad6f2854b2e1d4ae5b015c01f604a69a8
-
SHA256
9ecf060b37144fde780ff223abaf7de4e7a69f2877863a5565098c02b589ea5d
-
SHA512
df6995990b6263e80066878abba0867500dcf7531b5c454d15029f1ca1baac7a249ad0a37d762781eb7fa642d717069c761c3faead8331e9dee2a5a16a2391ad
-
SSDEEP
3072:bJeI0Z2m2oCPljCY/6Nq7T7R6BjINFWvL+isf+SjoZLEhUn:EIYwjCaDXSjiFWvyisnjaEa
Malware Config
Signatures
Files
-
9ecf060b37144fde780ff223abaf7de4e7a69f2877863a5565098c02b589ea5d.exe windows x86
e192dbd0ee90bb897aec9abd8ab6a9df
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
WaitForSingleObject
LoadLibraryExA
LoadLibraryA
DeviceIoControl
GetStartupInfoW
GetSystemTime
TerminateProcess
Sleep
SleepEx
WaitForSingleObject
GetProcAddress
LoadLibraryA
VirtualProtect
GetProfileIntW
WaitForSingleObjectEx
WriteProcessMemory
CreateProcessA
GetStartupInfoW
ReadFile
WaitForSingleObject
Sleep
GetStartupInfoA
WaitForSingleObjectEx
WriteProcessMemory
winhttp
WinHttpCreateUrl
WinHttpCloseHandle
WinHttpSetOption
WinHttpCreateUrl
WinHttpCloseHandle
WinHttpCloseHandle
WinHttpSetOption
WinHttpCreateUrl
WinHttpOpenRequest
WinHttpOpenRequest
WinHttpCheckPlatform
WinHttpSetOption
WinHttpOpenRequest
WinHttpOpenRequest
WinHttpOpenRequest
WinHttpSetOption
WinHttpOpenRequest
WinHttpOpenRequest
WinHttpCreateUrl
WinHttpCreateUrl
WinHttpCloseHandle
WinHttpSetOption
WinHttpOpenRequest
WinHttpOpenRequest
WinHttpCreateUrl
WinHttpCloseHandle
WinHttpSetOption
WinHttpCloseHandle
WinHttpCloseHandle
WinHttpOpenRequest
WinHttpCloseHandle
WinHttpCloseHandle
WinHttpCreateUrl
WinHttpCreateUrl
WinHttpCreateUrl
WinHttpSetOption
WinHttpOpenRequest
WinHttpSetOption
WinHttpCreateUrl
WinHttpSetOption
WinHttpSetOption
WinHttpSetOption
WinHttpSetOption
WinHttpOpenRequest
WinHttpSetOption
WinHttpCloseHandle
WinHttpOpenRequest
WinHttpOpenRequest
WinHttpOpenRequest
WinHttpOpenRequest
WinHttpOpenRequest
WinHttpOpenRequest
WinHttpSetOption
WinHttpCloseHandle
WinHttpCloseHandle
WinHttpCloseHandle
WinHttpSetOption
WinHttpOpenRequest
WinHttpSetOption
WinHttpCloseHandle
WinHttpSetOption
WinHttpOpenRequest
WinHttpOpenRequest
WinHttpSetOption
WinHttpSetOption
WinHttpOpenRequest
WinHttpSetOption
WinHttpOpenRequest
WinHttpCreateUrl
WinHttpSetOption
WinHttpCreateUrl
WinHttpSetOption
WinHttpOpenRequest
WinHttpCloseHandle
WinHttpOpenRequest
WinHttpSetOption
WinHttpOpenRequest
WinHttpCreateUrl
WinHttpCreateUrl
WinHttpSetOption
WinHttpCloseHandle
WinHttpSetOption
WinHttpCloseHandle
WinHttpSetOption
WinHttpSetOption
WinHttpOpenRequest
WinHttpSetOption
WinHttpCloseHandle
WinHttpCreateUrl
WinHttpCreateUrl
WinHttpCloseHandle
WinHttpCreateUrl
WinHttpSetOption
WinHttpCreateUrl
WinHttpCloseHandle
WinHttpSetOption
WinHttpCreateUrl
WinHttpCloseHandle
WinHttpSetOption
WinHttpOpenRequest
WinHttpSetOption
WinHttpSetOption
WinHttpCreateUrl
WinHttpCreateUrl
WinHttpCloseHandle
WinHttpSetOption
WinHttpCloseHandle
WinHttpSetOption
WinHttpCreateUrl
WinHttpSetOption
Sections
.text Size: 150KB - Virtual size: 184KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 5KB - Virtual size: 8KB
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ