Static task
static1
Behavioral task
behavioral1
Sample
a9612ccf2c3ecf65875c20469ca25ef24bb4bc8c7fdee73b6102d0862f3c0ad1.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a9612ccf2c3ecf65875c20469ca25ef24bb4bc8c7fdee73b6102d0862f3c0ad1.exe
Resource
win10v2004-20220812-en
General
-
Target
a9612ccf2c3ecf65875c20469ca25ef24bb4bc8c7fdee73b6102d0862f3c0ad1
-
Size
91KB
-
MD5
919af855a8b9ead2797d6d37fe166020
-
SHA1
baff6e2996a3d8cfce385be023ea0e6cec71dba7
-
SHA256
a9612ccf2c3ecf65875c20469ca25ef24bb4bc8c7fdee73b6102d0862f3c0ad1
-
SHA512
2bd31e1c21fa3d647ba1768b4568d087176ca569de4b06ce295c5f24fc9841003c0c21497324cfed799c925e13f2ac7b6b0d8902bfa8b76aa74cc53328522854
-
SSDEEP
1536:xNqb3/lIHvHgEhbfkacp75yZl8Vm/68+NIC0WuhzVeT5hG8RCnQiE4kMO:Di3qHfgE5fk3pdEysiJI5hz0T5hdCnsl
Malware Config
Signatures
Files
-
a9612ccf2c3ecf65875c20469ca25ef24bb4bc8c7fdee73b6102d0862f3c0ad1.exe windows x86
5649bfe48342bc84f696f32353101adf
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetNlsSectionName
lstrcmp
ValidateLCType
BaseInitAppcompatCache
GetUserGeoID
FindNextVolumeA
LeaveCriticalSection
SetNamedPipeHandleState
SuspendThread
lstrcmpiA
RemoveLocalAlternateComputerNameW
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 77KB - Virtual size: 98KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE