Static task
static1
Behavioral task
behavioral1
Sample
93cfc494e480e5f42afa11d52ba674c2205b0041057a97432364c0fe2ecb6517.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
93cfc494e480e5f42afa11d52ba674c2205b0041057a97432364c0fe2ecb6517.exe
Resource
win10v2004-20220812-en
General
-
Target
93cfc494e480e5f42afa11d52ba674c2205b0041057a97432364c0fe2ecb6517
-
Size
328KB
-
MD5
981ae1f10ce9d9cef077049f419eb6e1
-
SHA1
4c6b13205bbb8e3a2eefc0f1bde535ccee409909
-
SHA256
93cfc494e480e5f42afa11d52ba674c2205b0041057a97432364c0fe2ecb6517
-
SHA512
a140164365fbf691bc3988df872f429d14de2ad8db4c82861eeeb14ba1eab5516b927a3233159fc2ad437d2b1f2da0e59b1ce6bb8f6c785cf2566d677915a321
-
SSDEEP
6144:ajEDyVUtKq9o8BC2N6tdTTTbfxXuzJwGhrBN+:ZmVUtKq9o8BC2N6tdTTTbfxwmGhrD
Malware Config
Signatures
Files
-
93cfc494e480e5f42afa11d52ba674c2205b0041057a97432364c0fe2ecb6517.exe windows x86
5cf4000d34ef929fbb57e6cdc0c7afe0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteFileA
ReleaseMutex
CreateProcessA
GetTempPathA
GetLastError
CreateMutexA
GetModuleFileNameA
CreateDirectoryA
RemoveDirectoryA
GetComputerNameA
WritePrivateProfileStringA
GetSystemTime
FileTimeToSystemTime
GetFileTime
Sleep
GetFileSize
WaitForSingleObject
GetLocalTime
GetDiskFreeSpaceA
SystemTimeToFileTime
CopyFileA
GetWindowsDirectoryA
DeviceIoControl
GetPrivateProfileStringA
GetVolumeInformationA
CompareFileTime
ResumeThread
CreateThread
GetCommandLineW
TerminateProcess
OpenProcess
GetCurrentProcess
Process32Next
Process32First
CreateToolhelp32Snapshot
GetVersionExA
GetSystemDirectoryA
FindFirstFileA
FindNextFileA
FindClose
DosDateTimeToFileTime
LocalFileTimeToFileTime
GetUserDefaultLCID
EnumSystemLocalesA
GetLocaleInfoA
SetFileTime
SetFileAttributesA
CreateFileA
GetFileAttributesA
GetFileInformationByHandle
CloseHandle
FileTimeToLocalFileTime
FileTimeToDosDateTime
GetDriveTypeA
IsValidCodePage
IsValidLocale
HeapAlloc
HeapFree
GetFileType
ReadFile
WriteFile
SetFilePointer
RtlUnwind
RaiseException
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
IsBadWritePtr
SetEndOfFile
SetHandleCount
GetStdHandle
SetStdHandle
HeapSize
SetUnhandledExceptionFilter
GetProcAddress
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
GetCPInfo
GetACP
GetOEMCP
IsBadReadPtr
IsBadCodePtr
FlushFileBuffers
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
LoadLibraryA
LCMapStringA
LCMapStringW
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetLocaleInfoW
user32
MessageBoxA
advapi32
RegSetValueExA
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
RegOpenKeyExA
shell32
ShellExecuteA
CommandLineToArgvW
cabinet
FCICreate
FDICopy
FDIIsCabinet
FDIDestroy
FDICreate
FCIDestroy
FCIAddFile
FCIFlushCabinet
psapi
EnumProcessModules
GetModuleFileNameExA
Sections
.text Size: 120KB - Virtual size: 118KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 12KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 104KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
kfikccu Size: 4KB - Virtual size: 72KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mrdata Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE