Static task
static1
Behavioral task
behavioral1
Sample
9fe1c9a12e428cab173db52f104d13ca5a365f0c6eb515868d6c30dd5ab851b1.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
9fe1c9a12e428cab173db52f104d13ca5a365f0c6eb515868d6c30dd5ab851b1.exe
Resource
win10v2004-20220812-en
General
-
Target
9fe1c9a12e428cab173db52f104d13ca5a365f0c6eb515868d6c30dd5ab851b1
-
Size
14KB
-
MD5
48d16527581ac8562ad8a43abaa8a2f4
-
SHA1
f5ada9d04cef1106a74f2d1e44437f7807642895
-
SHA256
9fe1c9a12e428cab173db52f104d13ca5a365f0c6eb515868d6c30dd5ab851b1
-
SHA512
aeb8172dc5d4a0cbf7e13fda457157bb32af3f019a2aeb893bda321dde5c5ef0e4d63c00d64bed29d6a3e686aed6455a04d7343cb231e92781e275afa11f1b69
-
SSDEEP
192:jPUx+WnJ5Gki4ryLjA/5UAGTchSiBMhqPUx+WnJ5Gki4ryLjA/5UAGTchSiBMh:jPUxHOA/5UABxZPUxHOA/5UABx
Malware Config
Signatures
Files
-
9fe1c9a12e428cab173db52f104d13ca5a365f0c6eb515868d6c30dd5ab851b1.exe windows x86
f6fd99e36cf9d3d841272d95944e2e11
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetThreadPriority
CreateThread
DeleteFileA
GetLastError
GetFullPathNameA
CloseHandle
ResumeThread
CreateFileA
HeapAlloc
GetProcessHeap
HeapFree
lstrcpyA
GetTickCount
GetModuleFileNameA
GetSystemDirectoryA
lstrcatA
CopyFileA
Sleep
lstrlenA
WinExec
WriteFile
user32
wsprintfA
advapi32
DeleteService
CloseServiceHandle
StartServiceA
RegOpenKeyExA
RegSetValueExA
RegCloseKey
OpenSCManagerA
CreateServiceA
wininet
InternetCloseHandle
InternetOpenUrlA
InternetOpenA
InternetReadFile
ws2_32
socket
WSAStartup
WSAIoctl
WSASocketA
htons
inet_addr
sendto
closesocket
setsockopt
msvcrt
srand
atoi
time
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE