Static task
static1
Behavioral task
behavioral1
Sample
f00d9f2a3f4e3502096af9521601de511e5e13d17af8bb6cbaa9a62e4e622b95.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
f00d9f2a3f4e3502096af9521601de511e5e13d17af8bb6cbaa9a62e4e622b95.exe
Resource
win10v2004-20221111-en
General
-
Target
f00d9f2a3f4e3502096af9521601de511e5e13d17af8bb6cbaa9a62e4e622b95
-
Size
181KB
-
MD5
70f2fbaf831b085069da1940135bed2f
-
SHA1
a9d06808252e38a0b12a2118a2e3eb47a35b18e5
-
SHA256
f00d9f2a3f4e3502096af9521601de511e5e13d17af8bb6cbaa9a62e4e622b95
-
SHA512
7153b0bb3e796d4d046f68d0a93ea4d58914a83b2233ce6d4af973505fd5568cd9164a91e6f949df36edabe8cd623757df13daaa8c0e1d3a053dabbecbaab664
-
SSDEEP
3072:2exbjWrcqCQhKS9UzlL3Itm7p2K9ffxc4VzcrMCA4Yl6kwThqrEmWB:2XHK0UZLum1rfxVr4C6kDr+
Malware Config
Signatures
Files
-
f00d9f2a3f4e3502096af9521601de511e5e13d17af8bb6cbaa9a62e4e622b95.exe windows x86
77362cabcb80bc83f4a27b2e066b51f8
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetEnvironmentVariableA
GetTickCount
GetProcessVersion
DeviceIoControl
RtlMoveMemory
CreateNamedPipeA
GetCurrentDirectoryA
ReadFileEx
VirtualAlloc
ExitProcess
GetNamedPipeHandleStateA
GetFileAttributesExA
ExitThread
SetEvent
GetConsoleOutputCP
SetFirmwareEnvironmentVariableA
OpenWaitableTimerA
ShowConsoleCursor
ChangeTimerQueueTimer
OpenMutexA
TerminateThread
CallNamedPipeA
GetCommMask
advapi32
CredMarshalCredentialA
CredMarshalCredentialW
dplayx
DirectPlayCreate
d3d9
Direct3DCreate9
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 108KB - Virtual size: 163KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 55KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: - Virtual size: 312B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ