Static task
static1
Behavioral task
behavioral1
Sample
9b545f6998b000974ebfc9041dcb7ef5e57b653dc3b137a5792a4f4fc6437630.exe
Resource
win7-20220812-en
General
-
Target
9b545f6998b000974ebfc9041dcb7ef5e57b653dc3b137a5792a4f4fc6437630
-
Size
283KB
-
MD5
4bb14c43e885671cce099dccd022550a
-
SHA1
9dc7892ec5cbf23a17dbef21ca4069c9738e6469
-
SHA256
9b545f6998b000974ebfc9041dcb7ef5e57b653dc3b137a5792a4f4fc6437630
-
SHA512
0cb71f05e988e3a9a7878ddd7ca736b7b29b0d59e99185514f5eef34be7af0b6617239be2d86ee5373070d5a080b6bfec0e1f81858da8d4ea111c27aa21bcb58
-
SSDEEP
6144:+3wmZYHtWMKvxukxLrgSqGswQ9gDpsiMYU2p1nuaSND:WwEYMf8kd0SGiMYboLB
Malware Config
Signatures
Files
-
9b545f6998b000974ebfc9041dcb7ef5e57b653dc3b137a5792a4f4fc6437630.exe windows x86
6593d923fa8252dc220235670d4415f2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
setupapi
CM_Get_Global_State
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status
kernel32
AddAtomA
InitializeCriticalSection
LeaveCriticalSection
lstrcpyA
FreeLibrary
SetStdHandle
lstrcmpA
GetCPInfo
GetCurrentThreadId
FindFirstFileA
UnhandledExceptionFilter
WideCharToMultiByte
FreeEnvironmentStringsW
GetStartupInfoA
SetUnhandledExceptionFilter
GetProcAddress
GetStringTypeW
GetFileAttributesA
FlushFileBuffers
IsBadCodePtr
Sleep
GetStringTypeA
GetModuleHandleA
DeleteCriticalSection
lstrcatA
EnumResourceNamesW
lstrcmpiA
GetFullPathNameA
IsBadReadPtr
lstrcpynA
ReadFile
CloseHandle
LCMapStringW
FreeEnvironmentStringsA
LCMapStringA
lstrlenW
MultiByteToWideChar
EnterCriticalSection
WriteFile
GetTickCount
MulDiv
GetEnvironmentStrings
GetOEMCP
GetLastError
VirtualProtect
SetFilePointer
CreateFileA
GetEnvironmentStringsW
GetDiskFreeSpaceA
LoadLibraryA
lstrlenA
GetThreadLocale
RaiseException
Sections
.text Size: 148KB - Virtual size: 288KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 131KB - Virtual size: 131KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ