Static task
static1
Behavioral task
behavioral1
Sample
e9609c10bb2c5166646e3b654558d1c3b1f765b516867d8eda49dd7fc895d1a3.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
e9609c10bb2c5166646e3b654558d1c3b1f765b516867d8eda49dd7fc895d1a3.exe
Resource
win10v2004-20221111-en
General
-
Target
e9609c10bb2c5166646e3b654558d1c3b1f765b516867d8eda49dd7fc895d1a3
-
Size
57KB
-
MD5
c02bc52dfb676fdae62b051726e17334
-
SHA1
6c41d779d864bf344e99349a41c233725fb98953
-
SHA256
e9609c10bb2c5166646e3b654558d1c3b1f765b516867d8eda49dd7fc895d1a3
-
SHA512
17e8fe80bdb749182e56a2f01250215cd0f0d11568226d86c30bc3c1e6677855117d2108c7f433a452b741d73731360befbf3e5d248beb7247d8e066824c0e92
-
SSDEEP
1536:5OnzqIfhbp1pG7cZpgRJFolQJOJc7gmuYqQ7EV/Ky9gsyp:iZiRolQJY9y7Ep9gV
Malware Config
Signatures
Files
-
e9609c10bb2c5166646e3b654558d1c3b1f765b516867d8eda49dd7fc895d1a3.exe windows x86
2117b772398160f63265d332d71afd78
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
memset
memcpy
fopen
fseek
fclose
strlen
memmove
kernel32
GetModuleHandleA
HeapCreate
HeapDestroy
ExitProcess
Sleep
FreeLibrary
HeapAlloc
HeapFree
EnterCriticalSection
HeapReAlloc
LeaveCriticalSection
InitializeCriticalSection
TlsAlloc
TlsGetValue
TlsSetValue
WaitForMultipleObjects
CloseHandle
GetCurrentThreadId
GetCurrentProcess
GetCurrentThread
DuplicateHandle
CreateSemaphoreA
CreateThread
ReleaseSemaphore
user32
CallWindowProcA
winmm
mciSendCommandA
Sections
.code Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_WRITE
.. Size: 512B - Virtual size: 3B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.zaer Size: 1KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ