Static task
static1
Behavioral task
behavioral1
Sample
f9a2656e1cb9baeef75c184a2ea5631b1f6c864d6e7fb0b9bdcbc40ea740ef56.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
f9a2656e1cb9baeef75c184a2ea5631b1f6c864d6e7fb0b9bdcbc40ea740ef56.exe
Resource
win10v2004-20221111-en
General
-
Target
f9a2656e1cb9baeef75c184a2ea5631b1f6c864d6e7fb0b9bdcbc40ea740ef56
-
Size
70KB
-
MD5
f0fe9f3f84aebd8c791a8fbafe7aff88
-
SHA1
45399da3e0172d939ce15116dd051abd8ca7268d
-
SHA256
f9a2656e1cb9baeef75c184a2ea5631b1f6c864d6e7fb0b9bdcbc40ea740ef56
-
SHA512
f3d1d9c3fc195854502bfc8afdecaa5f378846a25b2f2ee666f29861c025cf5e19ac7080a2245d94cdfedbe22c9d97d1c849bba8bd8637c968f020aa5fd6cddb
-
SSDEEP
1536:8kgWXt/bw0g9S6OBbcNd+vpfrcJMONgdC0crUZ0W+5NO1Yg0nSYDkw:8kgW7vbu+1CMagEnWfYPnSYr
Malware Config
Signatures
Files
-
f9a2656e1cb9baeef75c184a2ea5631b1f6c864d6e7fb0b9bdcbc40ea740ef56.exe windows x86
83aae276eb43ae560452eaca611217c6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
js3250
JS_PropertyStub
JS_EnumerateStub
JS_ResolveStub
JS_free
JS_ConvertStub
JS_FinalizeStub
JS_SetContextCallback
JS_NewContext
JS_DefineFunctions
JS_DefineObject
JS_SetPrivate
JS_DropPrincipals
JS_DestroyContext
JS_ValueToInt32
JS_NewArrayObject
JS_DefineElement
JS_EvaluateScript
JS_GetPrototype
JS_GetClass
JS_SealObject
JS_NewObject
JS_SetPrototype
JS_SetParent
JS_SetGlobalObject
JS_ToggleOptions
JS_GetImplementationVersion
JS_ReportErrorNumber
JS_BufferIsCompilableUnit
JS_BeginRequest
JS_EndRequest
JS_ClearPendingException
JS_CompileScriptForPrincipals
JS_SetErrorReporter
JS_GetPrivate
JS_NewStringCopyZ
JS_DefineProperty
JS_ReportOutOfMemory
JS_ClearScope
JS_ReportError
JS_GC
JS_ConvertArguments
JS_SetVersion
JS_GetVersion
JS_CompileFileHandleForPrincipals
JS_ExecuteScript
JS_DestroyScript
JS_ValueToString
JS_GetStringBytes
JS_smprintf
xpcom
NS_GetServiceManager
NS_ShutdownXPCOM
NS_InitXPCOM2
msvcr71
_onexit
__dllonexit
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_amsg_exit
__p___initenv
exit
_cexit
_XcptFilter
_exit
_c_exit
setbuf
??2@YAPAXI@Z
_controlfp
printf
atoi
strcmp
_errno
strerror
_iob
strlen
fgetc
ungetc
fflush
fgets
strcpy
getenv
fopen
free
fprintf
strchr
fputs
fwrite
fputc
??3@YAXPAX@Z
_strdup
_putenv
_isatty
_fileno
kernel32
GetModuleHandleA
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 58KB - Virtual size: 58KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE