Static task
static1
Behavioral task
behavioral1
Sample
9ab3b353c170e8c86ec3d34dd4e75a8b5ea27656379d93c6cc07cdc8f2030a5c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9ab3b353c170e8c86ec3d34dd4e75a8b5ea27656379d93c6cc07cdc8f2030a5c.exe
Resource
win10v2004-20220901-en
General
-
Target
9ab3b353c170e8c86ec3d34dd4e75a8b5ea27656379d93c6cc07cdc8f2030a5c
-
Size
65KB
-
MD5
077a6ce91bdc8ad717db6af984a6e2f0
-
SHA1
187fec3f6d6d5c7c0ba325ddb166ba74bd876449
-
SHA256
9ab3b353c170e8c86ec3d34dd4e75a8b5ea27656379d93c6cc07cdc8f2030a5c
-
SHA512
a6599a91ea3f915e6d3eecace1cd947e00fee6cd8baff915681ec305fbc71493f54c097686ac4bab1073855db7d2388d8cb9a59c5a041e765e0b767df139b4d3
-
SSDEEP
1536:FMhiPCoAcxHbCi1Rf/MM3tmR9mSgwsnSSCctfmrN:FywCoAaDSgwsnPCcturN
Malware Config
Signatures
Files
-
9ab3b353c170e8c86ec3d34dd4e75a8b5ea27656379d93c6cc07cdc8f2030a5c.exe windows x86
22d3476a93f81fac3c39bf88d6aef2ea
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
advapi32
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
kernel32
lstrcmpiA
MultiByteToWideChar
WideCharToMultiByte
GetProcAddress
GetModuleHandleA
DeleteFileA
lstrcatA
lstrcpyA
ExitProcess
GetCPInfo
GetEnvironmentStringsW
SetEndOfFile
GetStringTypeW
FlushFileBuffers
GetStringTypeA
LCMapStringW
LCMapStringA
SetStdHandle
VirtualAlloc
HeapAlloc
LoadLibraryA
SetFilePointer
CreateFileA
ReadFile
GetStartupInfoA
GetCommandLineA
GetVersion
GetOEMCP
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
CloseHandle
HeapDestroy
GetACP
HeapCreate
SetHandleCount
GetStdHandle
GetFileType
HeapFree
VirtualFree
RtlUnwind
WriteFile
GetLastError
oleaut32
SysFreeString
ole32
CoUninitialize
CoInitialize
CoCreateInstance
user32
EnableMenuItem
GetSystemMenu
DispatchMessageA
SendDlgItemMessageA
PeekMessageA
DestroyWindow
MessageBoxA
CreateDialogParamA
LoadStringA
comctl32
ord17
Sections
.text Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 11KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 19KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE