Static task
static1
Behavioral task
behavioral1
Sample
9402c49d4e179cf5f7dbe460a7eaf3a76c803bfa0374d73e743b8d1400338a58.exe
Resource
win7-20221111-en
General
-
Target
9402c49d4e179cf5f7dbe460a7eaf3a76c803bfa0374d73e743b8d1400338a58
-
Size
286KB
-
MD5
c6725d979bd52e4ea36ce63d6a7e2689
-
SHA1
190f745345be28690f1ebb55a230ea6419dfbb32
-
SHA256
9402c49d4e179cf5f7dbe460a7eaf3a76c803bfa0374d73e743b8d1400338a58
-
SHA512
883d183742212bebde60cad2b3552cffc2e57501136ffd1c1b775b710dedba1347c2a46d01354b89834bac7219b29cc4e6d26ea3fa19065553215914a1dbc95b
-
SSDEEP
6144:Bx03hofzmL78H3wpHwaakfFiMFJnPvkD+y60Q3wZIM8BX:BxOhUz+EApbRxPvkD+J33wZIl
Malware Config
Signatures
Files
-
9402c49d4e179cf5f7dbe460a7eaf3a76c803bfa0374d73e743b8d1400338a58.exe windows x86
48736037ac1f470641e03ea94ae9c42f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
shell32
ShellExecuteA
Shell_NotifyIconA
kernel32
CopyFileW
FindClose
GlobalFindAtomW
FreeLibrary
SetFileAttributesW
HeapAlloc
GetCurrentProcessId
LoadLibraryExW
GetPrivateProfileStringW
LoadLibraryW
CreateMutexW
GetProcessHeap
WaitForSingleObject
FindFirstFileW
ReleaseMutex
LocalFree
FindNextFileW
WritePrivateProfileStringW
EnumResourceLanguagesA
GetPrivateProfileIntW
GetModuleHandleA
LoadLibraryExA
GetPrivateProfileIntW
lstrlenA
GetSystemInfo
lstrcmpiW
HeapFree
GetWindowsDirectoryA
GetModuleHandleW
GetCurrentDirectoryW
ExpandEnvironmentStringsW
GetSystemDirectoryW
GetCurrentProcess
shlwapi
GetAcceptLanguagesA
PathRemoveFileSpecW
UrlCreateFromPathW
PathFindExtensionW
PathAppendW
UrlUnescapeW
StrCmpIW
PathIsRelativeW
PathCreateFromUrlW
PathCombineW
rpcrt4
UuidCreate
Sections
.text Size: 147KB - Virtual size: 279KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 135KB - Virtual size: 135KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ