Static task
static1
Behavioral task
behavioral1
Sample
9891d1339cfe804202d2bde71372f40cabfde38350de9f82ac6f2ba0be6a9902.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
9891d1339cfe804202d2bde71372f40cabfde38350de9f82ac6f2ba0be6a9902.exe
Resource
win10v2004-20220812-en
General
-
Target
9891d1339cfe804202d2bde71372f40cabfde38350de9f82ac6f2ba0be6a9902
-
Size
56KB
-
MD5
56b57734f88e4d41346db9197f72db4a
-
SHA1
ac118d8697addffee64c5a43d204c25091155aee
-
SHA256
9891d1339cfe804202d2bde71372f40cabfde38350de9f82ac6f2ba0be6a9902
-
SHA512
b0851f75d9af07716c604a2164af6c385e0644c4a070eba39228ae1228658652d0379496c8698f991cbd041be7bcabd1412d6000566b1572e9d9e6cc8147450c
-
SSDEEP
1536:6AIHWOn9DTw3HxB1xUMT+UGSJc9dbg4B47Bm7H:6V9DTwBZU/T087
Malware Config
Signatures
Files
-
9891d1339cfe804202d2bde71372f40cabfde38350de9f82ac6f2ba0be6a9902.exe windows x86
67255db613a99df3fbbda4f2ecc9148d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapCreate
GetDriveTypeA
CreateWaitableTimerA
GetLastError
GetLocalTime
lstrcatW
GetPrivateProfileStringA
EndUpdateResourceA
TlsFree
FileTimeToLocalFileTime
GetConsoleTitleW
GetExitCodeProcess
GetModuleHandleA
GetTickCount
lstrcmpiA
SetStdHandle
GetLogicalDrives
GetBinaryTypeA
SetLastError
GetStdHandle
CreateNamedPipeA
ReadFile
IsValidCodePage
netshell
DllGetClassObject
HrGetIconFromMediaType
NcFreeNetconProperties
HrLaunchConnectionEx
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 49KB - Virtual size: 49KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.adata Size: 1024B - Virtual size: 513B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ