Static task
static1
Behavioral task
behavioral1
Sample
9b3fa764d7eaebd489fe553417cd6b7001b7ce6ea18108d5fa1d732623cd7f09.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
9b3fa764d7eaebd489fe553417cd6b7001b7ce6ea18108d5fa1d732623cd7f09.exe
Resource
win10v2004-20221111-en
General
-
Target
9b3fa764d7eaebd489fe553417cd6b7001b7ce6ea18108d5fa1d732623cd7f09
-
Size
108KB
-
MD5
75645a26a634a64bb6eb1227f9f15529
-
SHA1
f3be3d3ef2f6bc8cea68afcab60df83392e796f4
-
SHA256
9b3fa764d7eaebd489fe553417cd6b7001b7ce6ea18108d5fa1d732623cd7f09
-
SHA512
5b770bacc750360d3960fdaa37d96bab5d8b9f8faf9707f050ddc019bbedda95b485e80e9cf9ffddb9f3c5baad65e416ece6bbad1d2fade10f74fa7d9ebace55
-
SSDEEP
3072:jzmw5qzMwF8Vyon1zfH3kjuVl3LZxVIob2v:+88Mf1n1zfv3fVf
Malware Config
Signatures
Files
-
9b3fa764d7eaebd489fe553417cd6b7001b7ce6ea18108d5fa1d732623cd7f09.exe windows x86
135a8f1c9993bbf157b8daed8e0f65dd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetShortPathNameA
GetDriveTypeA
GetTempFileNameA
FlushViewOfFile
GetFileType
FindFirstFileA
ReadFile
CreateFileA
DeviceIoControl
GetModuleHandleA
SearchPathA
lstrlenA
MultiByteToWideChar
WideCharToMultiByte
LocalFree
SetEndOfFile
SetStdHandle
IsBadCodePtr
Sleep
GetLastError
GetModuleFileNameA
CreateDirectoryA
GetFileAttributesA
DeleteFileA
CreateProcessA
WaitForSingleObject
CloseHandle
SetFileAttributesA
CopyFileA
GetVersionExA
LoadLibraryA
GetProcAddress
FreeLibrary
GetWindowsDirectoryA
IsBadReadPtr
GetStringTypeW
GetStringTypeA
FlushFileBuffers
SetFilePointer
IsBadWritePtr
VirtualAlloc
RtlUnwind
RaiseException
GetCommandLineA
GetVersion
ExitProcess
HeapFree
HeapAlloc
HeapReAlloc
TerminateProcess
GetCurrentProcess
LCMapStringA
LCMapStringW
GetCPInfo
HeapSize
GetACP
GetOEMCP
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
WriteFile
advapi32
DeleteService
SetServiceStatus
RegisterServiceCtrlHandlerA
StartServiceCtrlDispatcherA
ControlService
StartServiceA
QueryServiceStatus
CreateServiceA
ChangeServiceConfig2A
RegCreateKeyA
RegSetValueExA
OpenSCManagerA
OpenServiceA
CloseServiceHandle
DeregisterEventSource
RegOpenKeyExA
RegCloseKey
RegQueryInfoKeyA
ole32
CoUninitialize
CoGetClassObject
StringFromCLSID
CoInitialize
oleaut32
VariantClear
Sections
.text Size: 80KB - Virtual size: 79KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 936B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ