Static task
static1
Behavioral task
behavioral1
Sample
9b7e1dbc384c17e4536e9b702fc7282fd86e834133c6766842122c0430af7a7c.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
9b7e1dbc384c17e4536e9b702fc7282fd86e834133c6766842122c0430af7a7c.exe
Resource
win10v2004-20221111-en
General
-
Target
9b7e1dbc384c17e4536e9b702fc7282fd86e834133c6766842122c0430af7a7c
-
Size
24KB
-
MD5
ebc67396818653811e6d098675eac9e6
-
SHA1
6a8b2b8f2abf764c559f303829c0c768bf9e6fb0
-
SHA256
9b7e1dbc384c17e4536e9b702fc7282fd86e834133c6766842122c0430af7a7c
-
SHA512
95d2b29b32e9053fb5b4261cee32eaa42f782a82c6de96c65ecc01f2fcf853c87040f64eeafb93fef700a182cf640f69fa8cda38390f5642a13a91cb782f8d7e
-
SSDEEP
192:krobINJwYnL0pf9l8rWHx1twBDDiI0+hUYoL7btb6TQP1oynZBnTzZKk9NPNoPp:/bINJ1n2fY4xixZwHtOa1fBnsk9hNWp
Malware Config
Signatures
Files
-
9b7e1dbc384c17e4536e9b702fc7282fd86e834133c6766842122c0430af7a7c.exe windows x86
ddb36448f9d433f3a3c516129f62c001
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ws2_32
WSAStartup
gethostbyname
wininet
FindFirstUrlCacheEntryA
FindNextUrlCacheEntryA
FindCloseUrlCache
mfc42
ord3181
ord3178
ord2781
ord939
ord926
ord4278
ord5683
ord800
ord1980
ord537
ord665
ord1979
ord5186
ord354
ord858
ord922
ord924
ord941
ord535
ord2818
ord825
ord860
ord540
ord668
ord2770
ord356
ord6673
ord3811
ord823
msvcrt
_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
_initterm
_acmdln
exit
_XcptFilter
_exit
_onexit
__dllonexit
sprintf
__setusermatherr
__CxxFrameHandler
__getmainargs
kernel32
GetStartupInfoA
CreateDirectoryA
GetFileAttributesA
SetFileAttributesA
SystemTimeToFileTime
CompareFileTime
GetLastError
GetModuleHandleA
GetProcAddress
GetVolumeInformationA
GetLogicalDrives
GetDriveTypeA
GetSystemDirectoryA
GetModuleFileNameA
CopyFileA
DeleteFileA
GetTempPathA
WinExec
user32
DispatchMessageA
TranslateMessage
TranslateAcceleratorA
GetMessageA
LoadAcceleratorsA
LoadStringA
RegisterClassExA
LoadCursorA
LoadIconA
UpdateWindow
CreateWindowExA
SetTimer
DefWindowProcA
advapi32
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 996B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ