Static task
static1
Behavioral task
behavioral1
Sample
9d3e003e863b554fb4f84605c7c2fd1b2faef1ddc00b3712b7ae425031cdbcc0.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9d3e003e863b554fb4f84605c7c2fd1b2faef1ddc00b3712b7ae425031cdbcc0.exe
Resource
win10v2004-20220812-en
General
-
Target
9d3e003e863b554fb4f84605c7c2fd1b2faef1ddc00b3712b7ae425031cdbcc0
-
Size
206KB
-
MD5
a2c9ce49692049e4bc47e60600dc5e90
-
SHA1
74be66b05af48290a01e29351689ec6f9b6d6677
-
SHA256
9d3e003e863b554fb4f84605c7c2fd1b2faef1ddc00b3712b7ae425031cdbcc0
-
SHA512
811806b8f309500c0dc1cad96f6d280b6cb50d913d7ec818f9ba8de176fbe44c45e8f22b1db8305db5716ff3473144d62f37c5bda7ef5288908749732b3643c8
-
SSDEEP
6144:bT7X2TSGwEmq6B7ket2nEzvG458rA8/be5E738y9:Pr22IUX0E7G45Oe5Ew2
Malware Config
Signatures
Files
-
9d3e003e863b554fb4f84605c7c2fd1b2faef1ddc00b3712b7ae425031cdbcc0.exe windows x86
3811608d106bc5bdb881254d6131ef83
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
scecli
SceAnalyzeSystem
SceBrowseDatabaseTable
SceAddToNameStatusList
SceAddToObjectList
SceCloseProfile
SceAppendSecurityProfileInfo
kernel32
GetVolumeInformationA
lstrcpyA
GetCurrentProcessId
LoadLibraryW
WideCharToMultiByte
FindResourceA
GetLocalTime
GetOEMCP
SetUnhandledExceptionFilter
IsValidLocale
HeapAlloc
SetLastError
GetProcessHeap
GetTickCount
GetCurrentProcess
lstrlenA
GetSystemTimeAsFileTime
GetLocaleInfoA
lstrcmpA
HeapFree
MultiByteToWideChar
CreateFileA
QueryPerformanceCounter
LockResource
SystemTimeToFileTime
CloseHandle
schannel
QuerySecurityPackageInfoW
QuerySecurityPackageInfoA
InitializeSecurityContextW
QueryContextAttributesW
QueryContextAttributesA
advapi32
RegOpenKeyExA
RegQueryValueExW
RegCloseKey
RegQueryValueExA
Sections
.text Size: 142KB - Virtual size: 142KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 54KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 3KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rcrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ