Static task
static1
Behavioral task
behavioral1
Sample
a9dcb4a9ccf56a52c3c0d4f2c94ad845922658b215b791168ddd0a4887890664.exe
Resource
win7-20220812-en
General
-
Target
a9dcb4a9ccf56a52c3c0d4f2c94ad845922658b215b791168ddd0a4887890664
-
Size
3.3MB
-
MD5
5b40ef1e8308ef28a841af0c1e247401
-
SHA1
c7041f569afb176be82cfca7073302a23bcf87bf
-
SHA256
a9dcb4a9ccf56a52c3c0d4f2c94ad845922658b215b791168ddd0a4887890664
-
SHA512
f924572223990397d71e32c01eaf7937617ef18bd7c91e1fa514f789ced183954dfcb62b50ff98175e8cf003c71da035f677e430c38a742ba0bc9b675d180998
-
SSDEEP
98304:jeti+/EnJbX/1kbhz12Mlm8SlmCT+/EnJbX/1kbhz12Mlm8SlmCT+/EnJbX/1kbu:jet
Malware Config
Signatures
Files
-
a9dcb4a9ccf56a52c3c0d4f2c94ad845922658b215b791168ddd0a4887890664.exe windows x86
4ccdaf8a406ed5f55b34383a241e94c9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLocalTime
LocalAlloc
GetProcAddress
LoadLibraryW
GetSystemTime
CompareStringW
CompareStringA
MultiByteToWideChar
WideCharToMultiByte
DebugBreak
RaiseException
GetVersionExA
LoadLibraryA
RtlUnwind
IsBadWritePtr
IsBadReadPtr
HeapValidate
ExitProcess
GetCPInfo
TerminateProcess
GetCurrentProcess
GetModuleHandleA
GetStdHandle
WriteFile
InterlockedDecrement
OutputDebugStringA
InterlockedIncrement
GetModuleFileNameA
LCMapStringA
GetLastError
LCMapStringW
GetStringTypeA
GetStringTypeW
HeapFree
HeapAlloc
GetProcessHeap
CloseHandle
FreeLibrary
HeapReAlloc
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
SetUnhandledExceptionFilter
SetHandleCount
GetFileType
GetStartupInfoA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
SetFilePointer
FlushFileBuffers
IsBadCodePtr
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
SetConsoleCtrlHandler
VirtualProtect
GetSystemInfo
VirtualQuery
InterlockedExchange
ReadFile
SetStdHandle
GetLocaleInfoW
GetTimeFormatA
GetDateFormatA
UnhandledExceptionFilter
GetCommandLineA
GetTimeZoneInformation
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetACP
GetOEMCP
SetEnvironmentVariableA
user32
CheckMenuRadioItem
Sections
.textbss Size: - Virtual size: 153KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 336KB - Virtual size: 332KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 32KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE