Static task
static1
Behavioral task
behavioral1
Sample
9bce08d329013523347c3db65900988d9ab7b4c5803534e45e0b90fe64843158.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9bce08d329013523347c3db65900988d9ab7b4c5803534e45e0b90fe64843158.exe
Resource
win10v2004-20220812-en
General
-
Target
9bce08d329013523347c3db65900988d9ab7b4c5803534e45e0b90fe64843158
-
Size
44KB
-
MD5
0ef441ee81606759ad458279ab0195c8
-
SHA1
ca33367be0f217d33c15f59043bd1b671112bfcd
-
SHA256
9bce08d329013523347c3db65900988d9ab7b4c5803534e45e0b90fe64843158
-
SHA512
d7e95487674d865d15d81b3e04be48b1fc168182f139ff50dc98229cf383c1edf374f4f2a14b276ce5f9265c94356ee5cbc9d6957302880878146d28010fe441
-
SSDEEP
768:Pgws45OsscPivxMNcgYck6LBGSQOCBrGGUDgNFGOE+ghreU/7X7TWzRpq:YwxScPrNmc/qYcNFLY9lTWC
Malware Config
Signatures
Files
-
9bce08d329013523347c3db65900988d9ab7b4c5803534e45e0b90fe64843158.exe windows x86
8eff6be16778121c633c5a9950ae7f66
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
InitializeCriticalSection
RtlUnwind
FatalAppExitA
GetEnvironmentStringsW
MultiByteToWideChar
GetShortPathNameA
VirtualAlloc
HeapCreate
FreeEnvironmentStringsW
TlsSetValue
lstrlenW
ExitProcess
GetLastError
GetModuleHandleA
GetCommandLineA
HeapReAlloc
IsDBCSLeadByte
lstrcpynA
WideCharToMultiByte
GetEnvironmentStrings
SetUnhandledExceptionFilter
GetCurrentThreadId
VirtualFree
TlsGetValue
GetStringTypeA
LCMapStringW
UnhandledExceptionFilter
GetOEMCP
lstrcpyA
lstrcmpiA
lstrlenA
HeapDestroy
DisableThreadLibraryCalls
TlsFree
GetCurrentThread
GetCurrentProcess
LoadResource
GetFileType
TerminateProcess
InterlockedDecrement
GetProcAddress
InterlockedIncrement
DeleteCriticalSection
EnterCriticalSection
FreeLibrary
HeapAlloc
SetLastError
SetHandleCount
HeapFree
FindResourceA
GetCPInfo
IsBadReadPtr
LoadLibraryA
GetStdHandle
IsBadCodePtr
GetACP
FreeEnvironmentStringsA
lstrcatA
TlsAlloc
LCMapStringA
LoadLibraryExA
SetConsoleCtrlHandler
GetModuleFileNameA
IsBadWritePtr
GetStringTypeW
LeaveCriticalSection
GetVersion
GetStartupInfoA
SizeofResource
WriteFile
cmdial32
AutoDialFunc
dataclen
DllGetClassObject
adsnt
DllGetClassObject
Sections
.text Size: 512B - Virtual size: 420B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ