Static task
static1
Behavioral task
behavioral1
Sample
c9e848a7f410589d14fd4bac945f5e4f55c2d4614162e2e4bb0249dedd269303.exe
Resource
win7-20221111-en
General
-
Target
c9e848a7f410589d14fd4bac945f5e4f55c2d4614162e2e4bb0249dedd269303
-
Size
185KB
-
MD5
4ead3335d0077fc9c5dfd04c3fc3bb7e
-
SHA1
60a6d77439e3cbb6f183b02e4dffacfdc793e474
-
SHA256
c9e848a7f410589d14fd4bac945f5e4f55c2d4614162e2e4bb0249dedd269303
-
SHA512
0e82fb346f56cf3de4179af55c2983534481c2e712a74d33bf7e473c503c3d6c2cefef666a816486d8e1ba0a17850d89066778d71d0f8caf6c6d4076e9e6141a
-
SSDEEP
3072:GuXMeK5uXru034SkJYWBR3gEO6hfXe4b7notJLips4q6JJaBvFHzPeHou3SNGHB:GuBK5uXru0eYWP3guhveptJB4q6r+1Da
Malware Config
Signatures
Files
-
c9e848a7f410589d14fd4bac945f5e4f55c2d4614162e2e4bb0249dedd269303.exe windows x86
77a246bf6714bde0ada1c646cdd9d495
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
setupapi
CM_Get_Global_State
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status
kernel32
SetStdHandle
AddAtomA
UnhandledExceptionFilter
WriteFile
ReadFile
DeleteCriticalSection
LoadLibraryA
CreateFileA
lstrcatA
VirtualProtect
GetOEMCP
WideCharToMultiByte
GetCPInfo
GetTickCount
lstrcpyA
LCMapStringW
lstrcmpiA
FlushFileBuffers
lstrlenA
GetEnvironmentStringsW
LCMapStringA
IsBadReadPtr
GetProcAddress
EnumResourceNamesW
LeaveCriticalSection
GetEnvironmentStrings
GetCurrentThreadId
GetModuleHandleA
MulDiv
GetStringTypeW
MultiByteToWideChar
InitializeCriticalSection
FreeLibrary
GetStringTypeA
GetDiskFreeSpaceA
GetFullPathNameA
lstrlenW
FindFirstFileA
SetUnhandledExceptionFilter
GetThreadLocale
Sleep
SetFilePointer
GetStartupInfoA
lstrcpynA
GetLastError
EnterCriticalSection
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetFileAttributesA
lstrcmpA
IsBadCodePtr
CloseHandle
RaiseException
Sections
.text Size: 99KB - Virtual size: 246KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 83KB - Virtual size: 82KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ