Static task
static1
Behavioral task
behavioral1
Sample
a9e5a65d6a71694b56c6f84ab801fbfb20fa1ef15ad30d3f49ee8d643ae195ea.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
a9e5a65d6a71694b56c6f84ab801fbfb20fa1ef15ad30d3f49ee8d643ae195ea.exe
Resource
win10v2004-20220812-en
General
-
Target
a9e5a65d6a71694b56c6f84ab801fbfb20fa1ef15ad30d3f49ee8d643ae195ea
-
Size
210KB
-
MD5
1213c191b0e52b351a9997cdf66d0e50
-
SHA1
2bc9b153e0943e9aba0644de07f38d2cb865dae4
-
SHA256
a9e5a65d6a71694b56c6f84ab801fbfb20fa1ef15ad30d3f49ee8d643ae195ea
-
SHA512
312a81def8bdc45738b88ae09347edba9bd48960073ad9a70272d0e9bb08123ddd77e13c4690dbbbd1a3b85979f06fde8bb601d5dc1546d835ab2a6befe42369
-
SSDEEP
6144:NRW8Amz6FYA03vpyf7DgRUndQa/N1rLjV1jb1LIGI:H/O6AChw4RUnd51rLJ131I
Malware Config
Signatures
Files
-
a9e5a65d6a71694b56c6f84ab801fbfb20fa1ef15ad30d3f49ee8d643ae195ea.exe windows x86
63dd7cf4b90da123cc9ad620296aacad
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentProcess
HeapAlloc
SetUnhandledExceptionFilter
GetVolumeInformationA
CreateFileA
WideCharToMultiByte
GetProcessHeap
IsValidLocale
GetSystemTimeAsFileTime
GetLocaleInfoA
HeapFree
GetLocalTime
FindResourceA
lstrcmpA
QueryPerformanceCounter
SystemTimeToFileTime
GetCurrentProcessId
GetTickCount
LoadLibraryW
lstrcpyA
SetLastError
GetOEMCP
MultiByteToWideChar
lstrlenA
CloseHandle
schannel
QueryContextAttributesW
InitializeSecurityContextW
QuerySecurityPackageInfoA
QueryContextAttributesA
QuerySecurityPackageInfoW
scecli
SceAddToObjectList
SceAnalyzeSystem
SceAddToNameStatusList
SceCloseProfile
SceBrowseDatabaseTable
SceAppendSecurityProfileInfo
advapi32
RegCloseKey
RegOpenKeyExW
RegQueryValueExA
RegQueryValueExW
Sections
.text Size: 142KB - Virtual size: 141KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 54KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 512B - Virtual size: 512B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.jdata Size: 7KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rcrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ