Static task
static1
Behavioral task
behavioral1
Sample
9053e3630d47b977f06bbf2732be1507ccd035bac25c395879aa2c64d79b7b61.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
9053e3630d47b977f06bbf2732be1507ccd035bac25c395879aa2c64d79b7b61.exe
Resource
win10v2004-20220812-en
General
-
Target
9053e3630d47b977f06bbf2732be1507ccd035bac25c395879aa2c64d79b7b61
-
Size
244KB
-
MD5
70516ef96fe59c79fbe301423e85e59a
-
SHA1
710369b00c24552afb1ae4795e1e0728ef637c1b
-
SHA256
9053e3630d47b977f06bbf2732be1507ccd035bac25c395879aa2c64d79b7b61
-
SHA512
6dbc792a8f56c681216f6b874df94c37407067c47df51b787ff1d9b45d7ced86928b62030d1775f755276a6e4d87e3310dd5b28645a2e64b458c558ddd167d2c
-
SSDEEP
3072:3z2OqqVg4uKGQs9ptMkzyjek5YxuPRKjNOCY0kDEPsh4O+nNJ2MWBXhWD:j2/qVYks2kz0KxKwBRKB4O2jj+
Malware Config
Signatures
Files
-
9053e3630d47b977f06bbf2732be1507ccd035bac25c395879aa2c64d79b7b61.exe windows x86
ae46ee22ced70af7f82d56713f68ee90
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ReadFile
FindNextFileA
GetStdHandle
GlobalFree
GetCPInfo
FindResourceW
ExitProcess
GetFileSize
GlobalAlloc
FindFirstFileA
ExitProcess
GetFileTime
DeleteFileW
HeapReAlloc
FindResourceA
DeleteFileA
CreateMutexA
CreateFileA
GlobalFree
CreateMutexW
FindNextVolumeA
CopyFileA
HeapAlloc
CreateMutexW
DeleteFileW
DeleteFileW
FindNextVolumeA
OpenFileMappingA
Sleep
GetFileTime
DeleteFileA
CreateFileA
GetComputerNameA
ReadFile
FindFirstFileA
CloseHandle
CreateFileA
WriteFile
FindResourceA
GlobalAlloc
ExitProcess
AddAtomA
HeapFree
HeapReAlloc
HeapAlloc
CreateMutexA
FindResourceA
HeapFree
HeapFree
HeapAlloc
FindNextFileA
FindFirstFileA
FindResourceW
CreateMutexA
FindResourceA
FindNextVolumeA
CreateMutexW
GetComputerNameA
WriteFile
CreateDirectoryA
CreateMutexA
HeapReAlloc
GetFileSize
AddAtomA
FindFirstFileA
GlobalAlloc
HeapFree
CreateMutexW
FindNextFileA
CreateFileA
GetStdHandle
GlobalFree
GetFileSize
FindFirstFileA
CreateDirectoryA
DeleteFileA
OpenFileMappingA
GlobalFree
GetFileTime
GetFileSize
HeapReAlloc
GlobalFree
Sleep
FindNextFileA
CreateFileA
HeapAlloc
ReadFile
OpenFileMappingA
AddAtomA
AddAtomA
WriteFile
WriteFile
FindNextVolumeA
ReadFile
DeleteFileA
FindResourceA
CloseHandle
WriteFile
FindResourceW
OpenFileMappingA
CreateMutexW
CreateDirectoryA
HeapFree
FindFirstFileA
GlobalFree
DeleteFileW
HeapAlloc
GetFileTime
HeapAlloc
GetFileTime
FindNextFileA
HeapFree
FindResourceA
ExitProcess
OpenFileMappingA
GlobalAlloc
CreateMutexW
FindNextVolumeA
FindNextFileA
GetFileTime
CreateDirectoryA
ExitProcess
WriteFile
GlobalFree
CreateFileA
FindNextFileA
GetComputerNameA
CreateMutexA
GetFileSize
Sleep
AddAtomA
DeleteFileA
CreateDirectoryA
FindFirstFileA
CreateDirectoryA
FindFirstFileA
GetCPInfo
GetComputerNameA
WriteFile
GetFileSize
FindResourceW
CreateFileA
CreateFileA
ReadFile
CopyFileA
GlobalFree
ExitProcess
GetFileSize
GetStdHandle
GlobalAlloc
GlobalFree
ReadFile
CreateDirectoryA
CreateMutexW
DeleteFileW
HeapFree
GetFileTime
ExitProcess
GlobalFree
FindNextVolumeA
AddAtomA
GetFileTime
HeapReAlloc
DeleteFileW
FindNextFileA
HeapFree
FindResourceA
CreateMutexA
CreateMutexA
GlobalFree
CopyFileA
FindResourceA
CreateDirectoryA
HeapAlloc
FindNextVolumeA
ReadFile
AddAtomA
CreateMutexW
GetCPInfo
GlobalFree
CloseHandle
CreateMutexA
AddAtomA
CreateMutexW
FindResourceW
FindFirstFileA
CloseHandle
CopyFileA
GetCPInfo
CreateMutexA
CloseHandle
GetFileSize
HeapReAlloc
FindResourceA
CopyFileA
GetComputerNameA
FindNextFileA
OpenFileMappingA
GetFileSize
CopyFileA
FindResourceW
CreateMutexW
ReadFile
HeapReAlloc
GetFileSize
GlobalAlloc
HeapAlloc
CloseHandle
DeleteFileA
GetStdHandle
GlobalAlloc
GetFileSize
CreateFileA
Sleep
HeapFree
GetCPInfo
DeleteFileA
GlobalFree
AddAtomA
CreateMutexA
CreateFileA
GlobalFree
DeleteFileW
CloseHandle
FindFirstFileA
DeleteFileW
HeapAlloc
FindNextFileA
FindResourceA
FindFirstFileA
WriteFile
GetStdHandle
ReadFile
CreateDirectoryA
Sleep
DeleteFileA
CreateMutexW
GlobalFree
FindNextFileA
GetStdHandle
Sections
code Size: 168KB - Virtual size: 164KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.init Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 4.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 209B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ