Static task
static1
Behavioral task
behavioral1
Sample
c9c6eb865347b4ce6397b5e0098ac1fa35e0235171b450c65f79adc782702ccb.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c9c6eb865347b4ce6397b5e0098ac1fa35e0235171b450c65f79adc782702ccb.exe
Resource
win10v2004-20220812-en
General
-
Target
c9c6eb865347b4ce6397b5e0098ac1fa35e0235171b450c65f79adc782702ccb
-
Size
92KB
-
MD5
0bd1517e78206ce05dc96b0a6186aa95
-
SHA1
ef4e458364a945d42a2de155287947cff7694f00
-
SHA256
c9c6eb865347b4ce6397b5e0098ac1fa35e0235171b450c65f79adc782702ccb
-
SHA512
417b29c5632ddbb3805e0b6a2a1b78312737fed5b64f1b732021a4873edc5f219b0a850006404699ea2d5cafc4989192ae99f134329b6d66ec4682fb9fbdac5b
-
SSDEEP
1536:6a0qnlhVeyCCkL330T+EW503YH0hWk0U/a22X3oJRzaso8:6a0qlfeyyfESGck7/b2Honu8
Malware Config
Signatures
Files
-
c9c6eb865347b4ce6397b5e0098ac1fa35e0235171b450c65f79adc782702ccb.exe windows x86
fe4d4492703b3e69b34a411cd4d8de6e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapDestroy
GetTickCount
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
RtlUnwind
CloseHandle
GetFileType
GetLastError
CreateFileA
HeapAlloc
HeapFree
HeapReAlloc
GetCommandLineA
GetVersion
ExitProcess
WriteFile
ReadFile
SetFilePointer
SetHandleCount
GetStdHandle
GetStartupInfoA
FlushFileBuffers
SetStdHandle
TerminateProcess
GetCurrentProcess
WideCharToMultiByte
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
SetEndOfFile
RaiseException
GetProcAddress
GetModuleHandleA
Sleep
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
HeapSize
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
InterlockedDecrement
InterlockedIncrement
GetCPInfo
CompareStringA
CompareStringW
GetACP
GetOEMCP
SetEnvironmentVariableA
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
LoadLibraryA
LCMapStringA
LCMapStringW
SetFileAttributesA
GetFileAttributesA
Sections
.text Size: 56KB - Virtual size: 55KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 20KB - Virtual size: 118KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ