Static task
static1
Behavioral task
behavioral1
Sample
9e07069b681fbc4425366ddb586c755739cb317a0a1fa56ff801e2b07c08f0f6.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
9e07069b681fbc4425366ddb586c755739cb317a0a1fa56ff801e2b07c08f0f6.exe
Resource
win10v2004-20220812-en
General
-
Target
9e07069b681fbc4425366ddb586c755739cb317a0a1fa56ff801e2b07c08f0f6
-
Size
64KB
-
MD5
3f52727ca03d7cfe200691df9f045d10
-
SHA1
cb177f272033de5ed48b7d6ea0953ae051afc022
-
SHA256
9e07069b681fbc4425366ddb586c755739cb317a0a1fa56ff801e2b07c08f0f6
-
SHA512
f0e29250d0265b48d145378f4ead9fc1d0d077dd399c6a1db7c919cf9abbd932f14034fc2252c0d9e7a26e3aaa49911a08c2d320fceeaa39ee39110a6708dd81
-
SSDEEP
1536:ouzDjNrbZG0zFI2JtIzP+IbJaN7NCGJoO:3NrbXPWBbJC
Malware Config
Signatures
Files
-
9e07069b681fbc4425366ddb586c755739cb317a0a1fa56ff801e2b07c08f0f6.exe windows x86
84f3ecca93c3ce09875b55d225d2a70b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntshrui
IsPathSharedW
GetLocalPathFromNetResourceA
IsPathSharedA
IsFolderPrivateForUser
wtsapi32
WTSSetSessionInformationA
WTSQuerySessionInformationA
WTSVirtualChannelClose
WTSRegisterSessionNotification
WTSWaitSystemEvent
uxtheme
GetWindowTheme
GetThemeInt
GetThemeSysSize
OpenThemeData
DrawThemeEdge
GetThemeFont
kernel32
FindResourceA
GetPrivateProfileSectionA
CreateMailslotA
GetModuleHandleA
IsBadStringPtrA
GetBinaryTypeA
QueryDosDeviceA
MoveFileA
IsBadCodePtr
EncodeSystemPointer
GetEnvironmentVariableA
HeapCreate
GetAtomNameA
clbcatq
ComPlusMigrate
SetupOpen
crypt32
CertFreeCRLContext
CertControlStore
CertFindCRLInStore
CertFindAttribute
CertCreateCRLContext
CertCreateContext
CertOpenStore
CertGetNameStringA
Sections
.text Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 671B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 50KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ