Static task
static1
Behavioral task
behavioral1
Sample
9a13c799beb9f564a06e2a06dc09c2e569b28821dc458894bae17b382da0f3ca.exe
Resource
win7-20220812-en
General
-
Target
9a13c799beb9f564a06e2a06dc09c2e569b28821dc458894bae17b382da0f3ca
-
Size
96KB
-
MD5
81abb5c828151d406702c0c13eea79e0
-
SHA1
900eb03d64b9a46a20c05b9bc449c84f4be31cd8
-
SHA256
9a13c799beb9f564a06e2a06dc09c2e569b28821dc458894bae17b382da0f3ca
-
SHA512
d15527aafe289db58d4b1bdcdb53f025f58dde7de24fa0760525df6508b80d1ce933958c44a6a1b4303ada92689a3546fea782740e92d823cc0e1aa0b998c19d
-
SSDEEP
1536:J8Jq0CgIe77oYN84aW84Ndi4WvjiAMCnKMx821LdogngwaMtuRb1/:J8JqTgIenoYi4aWrHWvjTMCB821L7Taz
Malware Config
Signatures
Files
-
9a13c799beb9f564a06e2a06dc09c2e569b28821dc458894bae17b382da0f3ca.exe windows x86
3f0a8f00f319fd9b5d711ab59fe94659
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
MessageBoxA
advapi32
RegCloseKey
RegQueryValueExA
RegCreateKeyExA
shell32
ShellExecuteA
kernel32
WideCharToMultiByte
GetACP
GetOEMCP
LoadLibraryA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
MultiByteToWideChar
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetCPInfo
GetProcAddress
WriteFile
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
HeapFree
HeapAlloc
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
VirtualAlloc
Sections
.text Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 9KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 928B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.erdata Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE