Static task
static1
Behavioral task
behavioral1
Sample
9ef44c479358783cf243c1dd0b8c9ae667806a80d420a89ff4e349b52811058c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9ef44c479358783cf243c1dd0b8c9ae667806a80d420a89ff4e349b52811058c.exe
Resource
win10v2004-20220812-en
General
-
Target
9ef44c479358783cf243c1dd0b8c9ae667806a80d420a89ff4e349b52811058c
-
Size
136KB
-
MD5
0efe250e9a56b878ad968f7d380d5cfe
-
SHA1
6c6c149251716409a03ee626e317b7e99bdff9ca
-
SHA256
9ef44c479358783cf243c1dd0b8c9ae667806a80d420a89ff4e349b52811058c
-
SHA512
01be431cd48208fb984be5bcfae0c23b2657334c9c1bd061bb904e85141c042baaacae2210ac09aeddd44ec810dad216c9cc156a5e95460d70b52a516c5e89bf
-
SSDEEP
1536:mQhKhQU/+SvxPapAlwvPywofCMMWkwJZTWUtVFSKEQqw1/WG6Eoxp8lxDDwOQPhy:mZB+EPqq7wo6MXHJ9WUfhr04DXQWiO
Malware Config
Signatures
Files
-
9ef44c479358783cf243c1dd0b8c9ae667806a80d420a89ff4e349b52811058c.exe windows x86
9d38ab2172f4ebb40ba61b204868661a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateDirectoryA
FreeResource
LockResource
LoadResource
SizeofResource
FindResourceA
WinExec
MultiByteToWideChar
GetLastError
GetFileAttributesA
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetCommandLineA
GetVersion
ExitProcess
RtlUnwind
RaiseException
HeapFree
TerminateProcess
GetCurrentProcess
CloseHandle
HeapAlloc
WriteFile
SetFilePointer
WideCharToMultiByte
HeapReAlloc
HeapSize
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
FlushFileBuffers
SetUnhandledExceptionFilter
VirtualAlloc
IsBadWritePtr
SetStdHandle
CreateFileA
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
IsBadReadPtr
IsBadCodePtr
ReadFile
SetEndOfFile
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
CompareStringA
CompareStringW
SetEnvironmentVariableA
Sections
.text Size: 48KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 56KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ