Static task
static1
Behavioral task
behavioral1
Sample
9efe408bc3048e9cdaa07a42dca09f63f57c48a3cab77d4b205cfe8e97c9b939.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9efe408bc3048e9cdaa07a42dca09f63f57c48a3cab77d4b205cfe8e97c9b939.exe
Resource
win10v2004-20220812-en
General
-
Target
9efe408bc3048e9cdaa07a42dca09f63f57c48a3cab77d4b205cfe8e97c9b939
-
Size
832KB
-
MD5
832f634d04b5a299ca41c560eef411f5
-
SHA1
b2ebaa890a04b2c9f07125f39db6c129d71367f3
-
SHA256
9efe408bc3048e9cdaa07a42dca09f63f57c48a3cab77d4b205cfe8e97c9b939
-
SHA512
2783df68fc6fff5ed5540a58752f53f8f223a856579c46f3c0ec319be3c54a6bac6e009f558c3b8830ed010de56580e29bc4f1fc6024d081e9c4017313732c78
-
SSDEEP
24576:0txfpNPKrn/tzyrr7YDJ4zhuBJ0SobiZ+L3d8:0txhW1zyrqJ4zoBxo+EL3G
Malware Config
Signatures
Files
-
9efe408bc3048e9cdaa07a42dca09f63f57c48a3cab77d4b205cfe8e97c9b939.exe windows x86
b30895378a74388c729c1f3058aafe5d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ReadConsoleA
GetFileAttributesA
GetEnvironmentStringsW
GetProcessVersion
MoveFileExW
SearchPathW
GetDriveTypeA
GetDiskFreeSpaceW
CopyFileA
CreateFileMappingA
HeapCreate
GetModuleHandleA
GetBinaryTypeW
CompareStringA
CreateDirectoryA
FreeEnvironmentStringsA
WriteConsoleA
msdart
??0CEXAutoBackupFile@@QAE@PBG@Z
mpFree
MpHeapSize
mpMalloc
Sections
.text Size: 17KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 704B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.udata Size: 813KB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ