Static task
static1
Behavioral task
behavioral1
Sample
9a0a3f4cedc09421298ab0665aa4ccb21f4c9b3866020488c943866f0ff33069.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9a0a3f4cedc09421298ab0665aa4ccb21f4c9b3866020488c943866f0ff33069.exe
Resource
win10v2004-20220812-en
General
-
Target
9a0a3f4cedc09421298ab0665aa4ccb21f4c9b3866020488c943866f0ff33069
-
Size
136KB
-
MD5
a1bb83bbe1390a4d373ced012b143330
-
SHA1
0727c05de757f55b8eafbfc88336f8518577f20e
-
SHA256
9a0a3f4cedc09421298ab0665aa4ccb21f4c9b3866020488c943866f0ff33069
-
SHA512
b5221e31a2cf2f42d3d3023d907891f228a458a42e10ff09a7c2f870fe3075ddbf1864003b7ce491c6f988c95ccab39eb4d3a5edef9d647c2dcb9bf50e226788
-
SSDEEP
1536:x7iiH+5ylWNmQFDUIYkK4cEui1gNNx0eW6QPB/4ZW1ck8zHhTduu+qjIk9WkD2of:xAglWU2hYZ4z1sxtbjIUWnoRzB
Malware Config
Signatures
Files
-
9a0a3f4cedc09421298ab0665aa4ccb21f4c9b3866020488c943866f0ff33069.exe windows x86
d9daf48e5f8dcab218b68e7d18858f83
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
setupapi
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInfo
SetupDiCallClassInstaller
SetupDiGetDeviceRegistryPropertyA
SetupDiGetClassDevsA
SetupDiClassGuidsFromNameA
kernel32
SetFileAttributesA
Sleep
FindNextFileA
GetCurrentProcess
DeleteFileA
FindFirstFileA
GetWindowsDirectoryA
GetLastError
TerminateProcess
GetStdHandle
GetFileType
GetStringTypeA
LCMapStringW
GetStringTypeW
MultiByteToWideChar
SetEndOfFile
LCMapStringA
LoadLibraryA
GetProcAddress
SetFilePointer
GetACP
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapFree
CloseHandle
HeapDestroy
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetCPInfo
GetOEMCP
GetEnvironmentVariableA
GetVersionExA
VirtualAlloc
HeapCreate
VirtualFree
RtlUnwind
WriteFile
HeapAlloc
HeapReAlloc
SetStdHandle
FlushFileBuffers
ReadFile
CreateFileA
user32
ExitWindowsEx
MessageBoxA
SendMessageA
wsprintfA
FindWindowA
advapi32
AdjustTokenPrivileges
RegOpenKeyExA
RegCloseKey
RegDeleteValueA
RegDeleteKeyA
LookupPrivilegeValueA
OpenProcessToken
Sections
.text Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 896B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ