Static task
static1
Behavioral task
behavioral1
Sample
9b3d91642490065aca3f8fa09dab281b845a5aa8105746018dd39a0419f97cad.exe
Resource
win7-20221111-en
General
-
Target
9b3d91642490065aca3f8fa09dab281b845a5aa8105746018dd39a0419f97cad
-
Size
274KB
-
MD5
19379d75d4b2d8e2ff91d1efd4304a3a
-
SHA1
6de6e7dd8bfde517bd96a252f99c4f854c31867a
-
SHA256
9b3d91642490065aca3f8fa09dab281b845a5aa8105746018dd39a0419f97cad
-
SHA512
fa9dc20d896265b342ceca58e3987aee0017798d06cee71d9e476035b0f4bee8075530d1fc01faeae1ade21741ef1767810b01202a4bcaad74ac83af12ebab41
-
SSDEEP
6144:fTGC8j8CEsu9PMuUpv1gsDXXI1ZkghODq2nBf53YKXEla:fuAKupkfBXXIy9Dq2LX0l
Malware Config
Signatures
Files
-
9b3d91642490065aca3f8fa09dab281b845a5aa8105746018dd39a0419f97cad.exe windows x86
a79ff3157b097b33e1ad5e6d53bafc04
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
setupapi
CM_Get_Global_State
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status
kernel32
LCMapStringW
FreeEnvironmentStringsA
GetCPInfo
lstrcpynA
GetThreadLocale
GetCurrentThreadId
AddAtomA
SetStdHandle
lstrlenA
lstrcmpA
GetLastError
GetModuleHandleA
UnhandledExceptionFilter
lstrcatA
LeaveCriticalSection
GetProcAddress
WideCharToMultiByte
VirtualProtect
EnterCriticalSection
GetStringTypeW
CreateFileA
GetDiskFreeSpaceA
FreeLibrary
lstrcpyA
EnumResourceNamesW
DeleteCriticalSection
FindFirstFileA
GetFileAttributesA
FreeEnvironmentStringsW
WriteFile
GetOEMCP
lstrcmpiA
ReadFile
GetStartupInfoA
CloseHandle
MultiByteToWideChar
lstrlenW
GetFullPathNameA
FlushFileBuffers
GetEnvironmentStringsW
IsBadCodePtr
GetStringTypeA
IsBadReadPtr
LCMapStringA
MulDiv
GetEnvironmentStrings
LoadLibraryA
SetUnhandledExceptionFilter
SetFilePointer
GetTickCount
Sleep
InitializeCriticalSection
RaiseException
Sections
.text Size: 137KB - Virtual size: 277KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 133KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ