Static task
static1
Behavioral task
behavioral1
Sample
962db90806f563064dea6031096a6a438d8b526405d8bcaaf2222a1ad0acca15.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
962db90806f563064dea6031096a6a438d8b526405d8bcaaf2222a1ad0acca15.exe
Resource
win10v2004-20220812-en
General
-
Target
962db90806f563064dea6031096a6a438d8b526405d8bcaaf2222a1ad0acca15
-
Size
206KB
-
MD5
9295440f117b99ef9234121ae9d98b30
-
SHA1
6c500d42dc5c3619b86bc2c108111971f1c041a3
-
SHA256
962db90806f563064dea6031096a6a438d8b526405d8bcaaf2222a1ad0acca15
-
SHA512
b8b0071a52a3613e10ae2598129625214ca7bbc8eb78332a4df276737547fa69330263a50d3600919e836e7be955bad242efcb37a6b6cccb1203717b65afb65a
-
SSDEEP
6144:bT7X2TSGwEmq6B7ket2nEzvG458rA8/be5E738y/:Pr22IUX0E7G45Oe5EwM
Malware Config
Signatures
Files
-
962db90806f563064dea6031096a6a438d8b526405d8bcaaf2222a1ad0acca15.exe windows x86
3811608d106bc5bdb881254d6131ef83
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
scecli
SceAnalyzeSystem
SceBrowseDatabaseTable
SceAddToNameStatusList
SceAddToObjectList
SceCloseProfile
SceAppendSecurityProfileInfo
kernel32
GetVolumeInformationA
lstrcpyA
GetCurrentProcessId
LoadLibraryW
WideCharToMultiByte
FindResourceA
GetLocalTime
GetOEMCP
SetUnhandledExceptionFilter
IsValidLocale
HeapAlloc
SetLastError
GetProcessHeap
GetTickCount
GetCurrentProcess
lstrlenA
GetSystemTimeAsFileTime
GetLocaleInfoA
lstrcmpA
HeapFree
MultiByteToWideChar
CreateFileA
QueryPerformanceCounter
LockResource
SystemTimeToFileTime
CloseHandle
schannel
QuerySecurityPackageInfoW
QuerySecurityPackageInfoA
InitializeSecurityContextW
QueryContextAttributesW
QueryContextAttributesA
advapi32
RegOpenKeyExA
RegQueryValueExW
RegCloseKey
RegQueryValueExA
Sections
.text Size: 142KB - Virtual size: 142KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 54KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rcrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ