Static task
static1
Behavioral task
behavioral1
Sample
9033bea5a01dbf947891bddeb47cc5bbff59792d8fc4b7acaddda0add51b6460.exe
Resource
win7-20221111-en
General
-
Target
9033bea5a01dbf947891bddeb47cc5bbff59792d8fc4b7acaddda0add51b6460
-
Size
96KB
-
MD5
a54362ab29dca4d479c4a08c135c9ded
-
SHA1
1e9f192503b6cf30be9eb2bcc3a00adec0736e1f
-
SHA256
9033bea5a01dbf947891bddeb47cc5bbff59792d8fc4b7acaddda0add51b6460
-
SHA512
15dd4df9d05bdc37c3f9e7575a276bd70186d9c776432ac9b2f93987dd27348e5e1e1dd1b2a7f5cd84a07a0e7c4c9bbd781dc8a139334b563ff4bdb742d17f2b
-
SSDEEP
1536:Ku+a7Z0NZ24Z2pNEhgFNk45n4W5ECY5BlLafMBEFTB7o3EBs2w7X4DqJ:B+zNo4Z2oCFN/j5Helm0OTW0Sl
Malware Config
Signatures
Files
-
9033bea5a01dbf947891bddeb47cc5bbff59792d8fc4b7acaddda0add51b6460.exe windows x86
5cb47d3e9600d93e83d6f208261bb41d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
InterlockedExchange
EnumLanguageGroupLocalesW
GetNumaHighestNodeNumber
setupapi
SetupCloseInfFile
SetupQueryFileLogA
SetupInitializeFileLogA
SetupCloseLog
SetupOpenLog
SetupRemoveFileLogEntryA
SetupGetFileCompressionInfoA
SetupGetInfFileListA
SetupScanFileQueueA
SetupInstallFilesFromInfSectionA
SetupOpenAppendInfFileA
SetupOpenFileQueue
SetupGetSourceFileLocationA
SetupGetSourceFileSizeA
rasman
RasRpcGetInstalledProtocols
RasRpcGetInstalledProtocolsEx
RasRpcGetSystemDirectory
RasRpcGetUserPreferences
RasRpcSetUserPreferences
Sections
.text Size: - Virtual size: 136KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ