Static task
static1
Behavioral task
behavioral1
Sample
9440b48ceea39695d121f96d7c3c149f1ae0e2b45529776fb2d3659f07c6bb75.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9440b48ceea39695d121f96d7c3c149f1ae0e2b45529776fb2d3659f07c6bb75.exe
Resource
win10v2004-20220812-en
General
-
Target
9440b48ceea39695d121f96d7c3c149f1ae0e2b45529776fb2d3659f07c6bb75
-
Size
564KB
-
MD5
d77e1060d9574c4845d147c2fade0a0e
-
SHA1
908485c572d35271e534b0a3687dc11c3fa43eba
-
SHA256
9440b48ceea39695d121f96d7c3c149f1ae0e2b45529776fb2d3659f07c6bb75
-
SHA512
17d036c99582cf39ab4c0e1173bda7428e1591894563ab557fa4db516857b49fbb9bb567cd381aefe64db4acf9f9c88c7bee61dcfc0dc329154a849402de7919
-
SSDEEP
12288:YHbqO/51a8VgIwzM2jCkbzP1OPGzxBJM:/O/Pa8iXA2jCkbj1J
Malware Config
Signatures
Files
-
9440b48ceea39695d121f96d7c3c149f1ae0e2b45529776fb2d3659f07c6bb75.exe windows x86
66dc135db25b703f8772a929bb27f6e1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ResetEvent
CloseHandle
CreateFileA
Sleep
GetTickCount
VirtualAlloc
GetProcAddress
SetFirmwareEnvironmentVariableW
LoadLibraryA
CreateEventA
GetLastError
VirtualAllocEx
SetFilePointer
GetLocaleInfoA
RtlUnwind
LCMapStringW
LCMapStringA
HeapSize
HeapReAlloc
HeapAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
ExitProcess
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
MultiByteToWideChar
VirtualProtect
GetSystemInfo
VirtualQuery
GetACP
GetOEMCP
GetCPInfo
GetStringTypeA
GetStringTypeW
ReadFile
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
FlushFileBuffers
SetStdHandle
ole32
CoCreateInstance
CoUninitialize
CoInitialize
msacm32
acmFilterEnumA
Sections
.text Size: 24KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 436KB - Virtual size: 434KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 96KB - Virtual size: 527KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ