Static task
static1
Behavioral task
behavioral1
Sample
9ab9025620f3f0120dac173aa9544c3527ec7a46ba056e25897a3964222fb070.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9ab9025620f3f0120dac173aa9544c3527ec7a46ba056e25897a3964222fb070.exe
Resource
win10v2004-20221111-en
General
-
Target
9ab9025620f3f0120dac173aa9544c3527ec7a46ba056e25897a3964222fb070
-
Size
140KB
-
MD5
403cd5f668135622b19e246316450e22
-
SHA1
4459591b514f75ce7a76f9d066ea03c57045e3b2
-
SHA256
9ab9025620f3f0120dac173aa9544c3527ec7a46ba056e25897a3964222fb070
-
SHA512
21311d2a1c3824c27692bb0c7a8bb60db7014ae90404c64081530609ab43fb0def05267393a93f8b8f0a9c7ec4eeb28ce1250a5c4a9e0a6f1b4da5b46fcdb5e7
-
SSDEEP
3072:0ZwD/RAdhD91anTcuYq882/jGN/yDoPx6:kwD679ET8jY6sx
Malware Config
Signatures
Files
-
9ab9025620f3f0120dac173aa9544c3527ec7a46ba056e25897a3964222fb070.exe windows x86
88b9b708ea97f84e5f3eae8c4b29d201
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
CloseHandle
lstrcmpiA
GetTickCount
TerminateProcess
OpenProcess
MultiByteToWideChar
lstrlenA
FreeLibrary
GetSystemDirectoryA
SetFileTime
SystemTimeToFileTime
CreateFileA
FileTimeToSystemTime
FileTimeToLocalFileTime
GetFileTime
WinExec
GetModuleFileNameA
GetEnvironmentVariableA
UnmapViewOfFile
GetModuleHandleA
MapViewOfFile
CreateFileMappingA
GetFileSize
LoadLibraryExA
GlobalAlloc
WriteFile
SetFileAttributesA
CopyFileA
DeleteFileA
MoveFileA
FindNextFileA
FindFirstFileA
GlobalFree
GetTempPathA
MoveFileExA
Sleep
GetVersionExA
GetWindowsDirectoryA
WaitForSingleObject
CreateThread
GetCurrentThreadId
GetLastError
SetFilePointer
lstrcatA
GetLocalTime
DeviceIoControl
user32
wvsprintfA
wsprintfA
ole32
CoCreateGuid
msvcrt
fseek
_strnicmp
__CxxFrameHandler
sprintf
??3@YAXPAX@Z
??2@YAPAXI@Z
wcslen
localtime
swprintf
wcscpy
fclose
_wcsnicmp
fwrite
fopen
ws2_32
WSCEnumProtocols
WSCWriteProviderOrder
WSCInstallProvider
WSCGetProviderPath
WSCDeinstallProvider
Sections
.data Size: 132KB - Virtual size: 131KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ