Static task
static1
Behavioral task
behavioral1
Sample
a9aaa777f996515018446b08ea7949cb7d8052a6ad1fdc102447bb3ac6b2891c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a9aaa777f996515018446b08ea7949cb7d8052a6ad1fdc102447bb3ac6b2891c.exe
Resource
win10v2004-20220812-en
General
-
Target
a9aaa777f996515018446b08ea7949cb7d8052a6ad1fdc102447bb3ac6b2891c
-
Size
58KB
-
MD5
fb809486cb610ca0362b6d9f8a2a8447
-
SHA1
19566da3311b2f8305b6834c56a1bca5dc7429fc
-
SHA256
a9aaa777f996515018446b08ea7949cb7d8052a6ad1fdc102447bb3ac6b2891c
-
SHA512
53728f10811484182b4f6c39e5149a8319879d2dca66b2754d8b9fff116a9e814691f95cc2ca4b1efa4cd4c0bdc1b01d8349829f5abd76cde348bb32f0fe3f02
-
SSDEEP
1536:RwOIT8gxVgKb2nsAX1MXWLb+Qlz7icqwyyu:irZ2sAFMXC3zOcqVy
Malware Config
Signatures
Files
-
a9aaa777f996515018446b08ea7949cb7d8052a6ad1fdc102447bb3ac6b2891c.exe windows x86
c9f6304b1861834f627ad2aba2a9a8e0
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
traffic
TcSetFlowA
TcAddFilter
TcAddFlow
TcCloseInterface
TcDeleteFilter
TcSetFlowA
TcAddFilter
TcAddFlow
TcCloseInterface
TcDeleteFilter
TcSetFlowA
TcSetFlowA
TcSetFlowA
kernel32
VirtualAllocEx
GetSystemDirectoryA
TlsFree
GetDiskFreeSpaceW
CreateFileA
GetThreadTimes
ReadFile
GetACP
TlsFree
TlsFree
ReplaceFileA
IsProcessInJob
GlobalFree
DeleteAtom
CreatePipe
DuplicateHandle
EncodePointer
GlobalFree
DeleteAtom
EnterCriticalSection
FreeLibrary
GetThreadLocale
FindNextFileA
GetModuleHandleW
GetFileTime
SetComputerNameW
LockFileEx
ExitProcess
AllocConsole
GetThreadTimes
ReleaseMutex
HeapWalk
LCMapStringW
IsValidLocale
srclient
EnableSR
EnableSR
EnableSR
EnableSR
EnableSR
EnableSR
EnableSR
EnableSR
EnableSR
EnableSR
EnableSR
EnableSR
EnableSR
EnableSR
EnableSR
EnableSR
EnableSR
EnableSR
EnableSR
EnableSR
EnableSR
EnableSR
EnableSR
EnableSR
EnableSR
EnableSR
EnableSR
EnableSR
EnableSR
EnableSR
EnableSR
EnableSR
EnableSR
EnableSR
EnableSR
EnableSR
EnableSR
Sections
.text Size: 512B - Virtual size: 430B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 48KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.DATA Size: 512B - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_WRITE