Static task
static1
Behavioral task
behavioral1
Sample
9fff8e9fef04c7a821af96f073fb12fb480662ef100ae4349bdcb9f05bca13d6.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9fff8e9fef04c7a821af96f073fb12fb480662ef100ae4349bdcb9f05bca13d6.exe
Resource
win10v2004-20220812-en
General
-
Target
9fff8e9fef04c7a821af96f073fb12fb480662ef100ae4349bdcb9f05bca13d6
-
Size
281KB
-
MD5
4051d7687cf8c637d18a784b6174e724
-
SHA1
3bb796a8d3bb96139743a34993a6a61dff5b2fd9
-
SHA256
9fff8e9fef04c7a821af96f073fb12fb480662ef100ae4349bdcb9f05bca13d6
-
SHA512
44b66e785672a5bfd82083757a39934574143bf769caf347665435ff224bcc9ed6bb871e7c9e758001dc0c17baaf9e244220e7a92268d34b6f156caec71400e7
-
SSDEEP
6144:yIwAwh3taXuIBjRXKbruDGJ6LGkN+OLRsodyQoOd9ulh+9mJhf:6h3tYuIBj5KSLGkN+iRs4/ch+8Jhf
Malware Config
Signatures
Files
-
9fff8e9fef04c7a821af96f073fb12fb480662ef100ae4349bdcb9f05bca13d6.exe windows x86
c57148691e293d987ea29d70e0ff6953
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetOEMCP
SystemTimeToFileTime
LoadLibraryA
QueryPerformanceCounter
SetUnhandledExceptionFilter
FindResourceW
lstrcmpA
GetUserDefaultLCID
WideCharToMultiByte
HeapFree
GetSystemTimeAsFileTime
GlobalFindAtomA
GetProcessHeap
lstrlenW
SetLastError
GetLocaleInfoW
CloseHandle
CreateFileA
MultiByteToWideChar
HeapAlloc
GetTickCount
lstrcpyW
GetCurrentProcessId
GetLocalTime
GetCurrentProcess
w32topl
ToplScheduleCacheDestroy
ToplSTHeapDestroy
ToplScheduleExportReadonly
ToplSTHeapExtractMin
ToplScheduleCacheCreate
ToplScheduleDuration
ToplSTHeapInit
ToplScheduleCreate
fmifs
ComputeFmMediaType
Format
DiskCopy
FormatEx
EnableVolumeCompression
Extend
Chkdsk
Sections
.text Size: 276KB - Virtual size: 307KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 644B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ