Static task
static1
Behavioral task
behavioral1
Sample
9c8011d6560fbaec356f1b7f8d0a5054d2377d0a9022c714f5cc8f0bd4da2f40.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9c8011d6560fbaec356f1b7f8d0a5054d2377d0a9022c714f5cc8f0bd4da2f40.exe
Resource
win10v2004-20220812-en
General
-
Target
9c8011d6560fbaec356f1b7f8d0a5054d2377d0a9022c714f5cc8f0bd4da2f40
-
Size
128KB
-
MD5
daa07c767c4281c09d62b38a9eb22587
-
SHA1
7d62d75d891996c90c7629d30b77dd78608e1680
-
SHA256
9c8011d6560fbaec356f1b7f8d0a5054d2377d0a9022c714f5cc8f0bd4da2f40
-
SHA512
11ea72cc770db5145c8938a26632ea597091cf3a9642f122bfb4066368e8fdaa9e59805302c109c2092ba3921db6a7783cd451204b15ae82da18753241071b6b
-
SSDEEP
3072:DoqqnKw+PtS5dqYoDwpDRzTw+qCw374JbVxrJ2c:DbVPodBKoBGV4Lxroc
Malware Config
Signatures
Files
-
9c8011d6560fbaec356f1b7f8d0a5054d2377d0a9022c714f5cc8f0bd4da2f40.exe windows x86
d28691e4db0be1f1817978ca3e0e53af
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetLastError
Sleep
lstrcmpiA
EndUpdateResourceA
CreateNamedPipeA
TlsFree
GetModuleHandleA
GetPrivateProfileStringW
GetLogicalDrives
lstrcmpiA
GetBinaryTypeA
FileTimeToLocalFileTime
lstrcatW
CreateWaitableTimerW
lstrcmpiA
GetTickCount
HeapCreate
GetDriveTypeA
lstrcmpiA
GetExitCodeProcess
IsValidCodePage
GetStdHandle
lstrcmpiA
ntmarta
EventGuidToName
EventNameFree
AccConvertAccessToSD
AccFreeIndexArray
Sections
.text Size: 4KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 290KB - Virtual size: 290KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.orpc Size: 1024B - Virtual size: 607B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ