Static task
static1
Behavioral task
behavioral1
Sample
9a27b88d2d5273710a75c1ee35d942a463de14190fae221abff53be0c86e6956.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9a27b88d2d5273710a75c1ee35d942a463de14190fae221abff53be0c86e6956.exe
Resource
win10v2004-20220901-en
General
-
Target
9a27b88d2d5273710a75c1ee35d942a463de14190fae221abff53be0c86e6956
-
Size
804KB
-
MD5
ebd701873d1e9e015f8040c2b80a01a5
-
SHA1
31275574cd902c77d3402964b73bd9573d7f775e
-
SHA256
9a27b88d2d5273710a75c1ee35d942a463de14190fae221abff53be0c86e6956
-
SHA512
4bd9b1d9a52b7238a76428f85a5901ca76687919f0a1837d303a8ebc79fbfc64018f938ad3ea67521567843df6dddb9f8abe5e0b460816b7c9c08dfa70a84f30
-
SSDEEP
12288:uWRyTSktU4g/n/t0EW5A0zyYvJwQ5oAlK+GE4vebIk6bQQ52LgRg08y5Hpnrzv:uiStU4gf2EW5A2DJr/kS4vGIk6v3Hf
Malware Config
Signatures
Files
-
9a27b88d2d5273710a75c1ee35d942a463de14190fae221abff53be0c86e6956.exe windows x86
e69365015d755f57a834419659a4adfb
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WinExec
CloseHandle
WriteFile
CreateFileA
GetWindowsDirectoryA
LockResource
SizeofResource
Sleep
FindResourceA
SetThreadPriority
GetCurrentThread
GetCurrentProcess
SetPriorityClass
GetShortPathNameA
GetModuleFileNameA
LoadResource
GetEnvironmentVariableA
advapi32
RegOpenKeyA
shell32
ShellExecuteExA
ShellExecuteA
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 784KB - Virtual size: 784KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.neolit Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ