Static task
static1
Behavioral task
behavioral1
Sample
9605a6c76c7cf443af5fbb0739a30ca5d28ed271e2e40bdf5ce2fd19c9ff8007.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9605a6c76c7cf443af5fbb0739a30ca5d28ed271e2e40bdf5ce2fd19c9ff8007.exe
Resource
win10v2004-20220812-en
General
-
Target
9605a6c76c7cf443af5fbb0739a30ca5d28ed271e2e40bdf5ce2fd19c9ff8007
-
Size
1.0MB
-
MD5
cadfcf2f76decdf4460d0bc5dd1fcadb
-
SHA1
2520f3f97d69c548e12fbe82606c6840cb877fdf
-
SHA256
9605a6c76c7cf443af5fbb0739a30ca5d28ed271e2e40bdf5ce2fd19c9ff8007
-
SHA512
2b3000085f7f5fa6f9bd52b49486d8384d98950104ca3d6099490d31cf04522e3761f2124d2984c978dce70e43d759ac2df195b394bb649638d11de4af3a26cf
-
SSDEEP
24576:TdOX4tmCLUZPYwYNIXvSJOK+ATh3jaCw:xP9Y61LTh3m
Malware Config
Signatures
Files
-
9605a6c76c7cf443af5fbb0739a30ca5d28ed271e2e40bdf5ce2fd19c9ff8007.exe windows x86
0af24ae0dff2193af251192d661e520d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
lstrcmpiA
EnterCriticalSection
lstrlenA
GetModuleFileNameA
lstrcmpA
GetProcAddress
LoadLibraryA
GetModuleHandleA
VirtualFree
VirtualAlloc
VirtualProtect
LoadLibraryExW
LoadLibraryExA
LoadLibraryW
GetModuleHandleW
GetModuleFileNameW
FreeLibraryAndExitThread
FreeLibrary
GetLastError
ExitThread
MultiByteToWideChar
LoadResource
GetVersionExA
GetProcessHeap
HeapFree
HeapAlloc
RtlUnwind
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
GetEnvironmentVariableA
HeapDestroy
HeapCreate
HeapReAlloc
IsBadWritePtr
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetCurrentThreadId
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
WriteFile
GetCPInfo
GetACP
GetOEMCP
InterlockedDecrement
InterlockedIncrement
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
Sleep
lstrcpyA
lstrcpyW
lstrcmpW
GetFullPathNameW
VirtualQuery
IsBadReadPtr
GetSystemInfo
user32
MessageBoxA
Sections
.pe Size: 1.0MB - Virtual size: 1.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ