Static task
static1
Behavioral task
behavioral1
Sample
a9e0307270178ea5a660d2ade007d3a8d51a3515704965f68ad679622c5a0f22.exe
Resource
win7-20220901-en
General
-
Target
a9e0307270178ea5a660d2ade007d3a8d51a3515704965f68ad679622c5a0f22
-
Size
96KB
-
MD5
f2f3820e96eaa28159c8543f3ed3fa10
-
SHA1
68d281418ebe517f195b76a21668403f2776c709
-
SHA256
a9e0307270178ea5a660d2ade007d3a8d51a3515704965f68ad679622c5a0f22
-
SHA512
3753f03f6cfa0b172b75ee1305aee546707976d4feac7b83d89b263aa46642fb0c4046451d09a6d7f67c22712d696a0f704a7bab86849bf91e0ecf8cfebb7636
-
SSDEEP
3072:COZNFF+WiKVIc1nlW6DwfZnIp0hpiJRJe:CyNOWivcll16ZnIpv
Malware Config
Signatures
Files
-
a9e0307270178ea5a660d2ade007d3a8d51a3515704965f68ad679622c5a0f22.exe windows x86
54411c677eeaf289031f022c7b111cfc
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
iphlpapi
GetAdaptersInfo
wininet
InternetCloseHandle
InternetOpenA
InternetReadFile
InternetOpenUrlA
user32
TranslateMessage
PeekMessageA
wsprintfA
MessageBoxA
KillTimer
SetTimer
DispatchMessageA
GetMessageA
kernel32
GetModuleHandleA
LCMapStringA
LoadLibraryA
GetProcAddress
FreeLibrary
GetTempPathA
GetTickCount
CreateToolhelp32Snapshot
Process32First
Process32Next
GetProcessHeap
ExitProcess
HeapAlloc
HeapReAlloc
HeapFree
IsBadReadPtr
MultiByteToWideChar
WideCharToMultiByte
GetUserDefaultLCID
msvcrt
??2@YAPAXI@Z
strchr
tolower
atoi
_ftol
memmove
modf
free
malloc
__CxxFrameHandler
??3@YAXPAX@Z
strncpy
strncmp
_strnicmp
sprintf
strrchr
advapi32
RegOpenKeyA
RegQueryValueExA
RegCloseKey
ole32
CLSIDFromString
CoCreateInstance
OleRun
CoUninitialize
CoInitialize
CLSIDFromProgID
oleaut32
LoadTypeLi
LHashValOfNameSys
RegisterTypeLi
SafeArrayCreate
SysAllocString
VariantClear
SafeArrayDestroy
shlwapi
PathFileExistsA
Sections
.text Size: 29KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rmnet Size: 56KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE