Static task
static1
Behavioral task
behavioral1
Sample
9e1eedf3c4aa478bb24e995fd8f0a9b020807a9f47a8c975af6c0e2bc190df4d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9e1eedf3c4aa478bb24e995fd8f0a9b020807a9f47a8c975af6c0e2bc190df4d.exe
Resource
win10v2004-20220812-en
General
-
Target
9e1eedf3c4aa478bb24e995fd8f0a9b020807a9f47a8c975af6c0e2bc190df4d
-
Size
380KB
-
MD5
24effa832e600a2d5ad3d3b603a460ca
-
SHA1
b71dd037b74457bfb6cecbf714f8122225821e97
-
SHA256
9e1eedf3c4aa478bb24e995fd8f0a9b020807a9f47a8c975af6c0e2bc190df4d
-
SHA512
66806a7aeea106f5f626f157800d97b98232307864d65c13dcfc33b746420ef3dd125c27eb86ef602eea4dabf35dc79b2fb2f3a30b77b32e6c099bd12d384ec8
-
SSDEEP
6144:EBRWCWx5rbtv245NHWHEW8G9blF6tfzHQjoOinK/cp8XiYtDZxdOasKMB3nqN:EzV65rNNHWkWNs5ltKTXtDEYMB3nq
Malware Config
Signatures
Files
-
9e1eedf3c4aa478bb24e995fd8f0a9b020807a9f47a8c975af6c0e2bc190df4d.exe windows x86
2a1337f300b86329014cee7dd571b012
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ole32
CoInitialize
sensapi
IsDestinationReachableW
sfc
SfcIsFileProtected
kernel32
DeleteCriticalSection
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetTimeZoneInformation
LCMapStringW
Sleep
CreateProcessW
CloseHandle
GetStartupInfoW
CopyFileW
GetTickCount
CreateEventW
FileTimeToLocalFileTime
GetVersion
InterlockedExchange
CreateDirectoryW
DeleteFileW
ResetEvent
VirtualFree
VirtualProtect
VirtualAlloc
SetSystemTimeAdjustment
GetSystemDirectoryW
OpenMutexW
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
RtlUnwind
SetUnhandledExceptionFilter
GetProcAddress
GetModuleHandleA
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
GetModuleFileNameW
FreeEnvironmentStringsA
MultiByteToWideChar
GetEnvironmentStrings
FreeEnvironmentStringsW
GetLastError
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
GetCurrentThread
HeapDestroy
HeapCreate
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
LeaveCriticalSection
FatalAppExitA
EnterCriticalSection
SetConsoleCtrlHandler
FreeLibrary
LoadLibraryA
InitializeCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapReAlloc
HeapSize
GetLocaleInfoA
GetLocaleInfoW
WideCharToMultiByte
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
GetStringTypeA
GetStringTypeW
LCMapStringA
Sections
.text Size: 110KB - Virtual size: 109KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 171KB - Virtual size: 171KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 90KB - Virtual size: 423KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ