Static task
static1
Behavioral task
behavioral1
Sample
f9aef96beb7819f72a8ee9f860a13c4aa1c312060c448d89795b1f4542d0afd0.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f9aef96beb7819f72a8ee9f860a13c4aa1c312060c448d89795b1f4542d0afd0.exe
Resource
win10v2004-20220901-en
General
-
Target
f9aef96beb7819f72a8ee9f860a13c4aa1c312060c448d89795b1f4542d0afd0
-
Size
499KB
-
MD5
0bbc27122939cf9be30a0731ca638124
-
SHA1
d7e9695e07ddf5812a8db81bd5b48e601a2b3e5a
-
SHA256
f9aef96beb7819f72a8ee9f860a13c4aa1c312060c448d89795b1f4542d0afd0
-
SHA512
e65864075effa1c2b5419a32a9e56d1537facb06cc85296fa4db150e99ea3eaecf36cd9c56fbb92df71a594d11c2dc2cccc1882e4d8c458f5feb865f23990283
-
SSDEEP
6144:HSCFXkyYfwi9xE31QlXEDyk+OOvCeE7JiR3EZFjf2a119ILlhKe+TP:y4PmwgoG9EDyEaVE7kEHjfR112Llhx+
Malware Config
Signatures
Files
-
f9aef96beb7819f72a8ee9f860a13c4aa1c312060c448d89795b1f4542d0afd0.exe windows x86
0cecf7a610a3aa4d4546a36b9882ccab
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
TlsAlloc
CreateFileA
GetDriveTypeA
IsBadStringPtrA
lstrlenA
ReleaseMutex
GetStdHandle
CancelIo
CreateFileMappingA
PulseEvent
HeapCreate
TlsGetValue
ResumeThread
IsDebuggerPresent
SuspendThread
GetACP
GetEnvironmentVariableA
GetModuleHandleA
GetModuleFileNameA
GetStartupInfoA
advapi32
IsTextUnicode
InitializeSid
IsValidSecurityDescriptor
RegEnumKeyA
CreateProcessAsUserA
CreateServiceW
IsValidSid
ClearEventLogW
RegCreateKeyExW
IsValidAcl
ControlService
RegDeleteValueA
RegQueryValueW
usbui
USBErrorHandler
USBErrorHandler
USBErrorHandler
USBErrorHandler
user32
MessageBoxA
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 408KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 491KB - Virtual size: 490KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ