Static task
static1
Behavioral task
behavioral1
Sample
a9af11c3ce104789357b574c2498c58a0e0967d7f999740b0d534e4e1555dbec.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
a9af11c3ce104789357b574c2498c58a0e0967d7f999740b0d534e4e1555dbec.exe
Resource
win10v2004-20221111-en
General
-
Target
a9af11c3ce104789357b574c2498c58a0e0967d7f999740b0d534e4e1555dbec
-
Size
109KB
-
MD5
d696671db1a5f0d68d9c8b571a5c99d1
-
SHA1
0ac2649babb48bab130b63efcaa97889c3a6b953
-
SHA256
a9af11c3ce104789357b574c2498c58a0e0967d7f999740b0d534e4e1555dbec
-
SHA512
8fe97d39990a68d7cd597520bd4b1ca33843de48076f2c4520585c4d942a5f75107f6cc3ee225873bb4647dce4fdcda7e1796dae72010a6ed2ce6e735c83faa6
-
SSDEEP
1536:nTIgwuKHN3IPc/kAfCOM+kktpH2udyisklc4tkju5S28Lw:nMgvOIQkAfkNkbhyMlc5yn8Lw
Malware Config
Signatures
Files
-
a9af11c3ce104789357b574c2498c58a0e0967d7f999740b0d534e4e1555dbec.exe windows x86
5fc3c717e566b7057bde8737f29536a2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetDriveTypeA
LoadResource
FileTimeToLocalFileTime
GetStartupInfoA
GlobalAlloc
VirtualProtect
GetFileType
FileTimeToSystemTime
GlobalHandle
GetStringTypeA
GlobalLock
IsDBCSLeadByte
GetTempPathA
lstrcpynA
GetCurrentThread
SizeofResource
SetCurrentDirectoryA
InterlockedExchange
GetDiskFreeSpaceA
IsDebuggerPresent
GetProcAddress
GetThreadLocale
GetCPInfo
RtlMoveMemory
GetFullPathNameA
GetVersionExW
GetModuleHandleA
DeleteFileA
msvcrt
_XcptFilter
__set_app_type
_controlfp
_initterm
__p__fmode
tan
_adjust_fdiv
__getmainargs
__p___initenv
_exit
__p__commode
_except_handler3
Sections
.text Size: 1024B - Virtual size: 578B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 37KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Yqarov Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 100B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ