Static task
static1
Behavioral task
behavioral1
Sample
9ee6acfa1732ea87db9a742e34398cd4dd47a16865cdbe2e4a7d101fd4ad0524.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9ee6acfa1732ea87db9a742e34398cd4dd47a16865cdbe2e4a7d101fd4ad0524.exe
Resource
win10v2004-20221111-en
General
-
Target
9ee6acfa1732ea87db9a742e34398cd4dd47a16865cdbe2e4a7d101fd4ad0524
-
Size
302KB
-
MD5
e7e89ff40e56d1c8a259c589ea4b0e10
-
SHA1
e0d6f160fd848b14c2293075b7917b000ffe92e8
-
SHA256
9ee6acfa1732ea87db9a742e34398cd4dd47a16865cdbe2e4a7d101fd4ad0524
-
SHA512
80082fdcd5d2e39a42f9b7d5e8732a28b088ad775f06de6fc57b5befafc5d42c458d5dc1517ffcc68ce4ff70bd26597abaf0b2997fd1627444de96f8935dd01f
-
SSDEEP
6144:/4AIhM4SV/iKZKY6xaD7Qecz3H/QRwMUx16D:AnDSVlZ3627QBzIRUaD
Malware Config
Signatures
Files
-
9ee6acfa1732ea87db9a742e34398cd4dd47a16865cdbe2e4a7d101fd4ad0524.exe windows x86
324fb8cbe16b9a7350a058da9da02c89
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetPrivateProfileSectionW
GetDiskFreeSpaceA
GetFullPathNameA
lstrcmpiW
InterlockedExchange
CloseHandle
GetEnvironmentVariableA
FoldStringA
GetPrivateProfileIntW
CloseHandle
GetFileAttributesA
lstrcmpW
CreateEventA
GetFullPathNameA
GetDiskFreeSpaceA
WaitForMultipleObjects
GetExitCodeThread
GetModuleHandleA
HeapCreate
GetPrivateProfileIntW
CloseHandle
CreateDirectoryW
OpenMutexA
certmgr
DllRegisterServer
DllUnregisterServer
DllCanUnloadNow
DllGetClassObject
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 295KB - Virtual size: 295KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ