Static task
static1
Behavioral task
behavioral1
Sample
9a881bec79003749351146ab7f4ee6a07a8d8aa721b8d66d736547295009d9b3.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
9a881bec79003749351146ab7f4ee6a07a8d8aa721b8d66d736547295009d9b3.exe
Resource
win10v2004-20220901-en
General
-
Target
9a881bec79003749351146ab7f4ee6a07a8d8aa721b8d66d736547295009d9b3
-
Size
9KB
-
MD5
4a949e448bdea96cd162f6d2e6ace60e
-
SHA1
d0f69257612afd4526ad58b96cce5f96637b13b4
-
SHA256
9a881bec79003749351146ab7f4ee6a07a8d8aa721b8d66d736547295009d9b3
-
SHA512
97653b76855fdf10d6a21a328133cb7b4683c78041ff6e9a793d9d5eedc9e99aee5bbf5bb2d5a841982bbcabad6f8f34deffbe5da3aa4821cb6aff6259878f2c
-
SSDEEP
192:uFMrncAVi/ibBhGmZCxU65q7UkKapk0RzrXg:OMVViKbr6xp5aUkKapk0N8
Malware Config
Signatures
Files
-
9a881bec79003749351146ab7f4ee6a07a8d8aa721b8d66d736547295009d9b3.exe windows x86
68d011417bac50e2b96286edb7ab3a1c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
wininet
InternetSetFilePointer
InternetSetOptionA
HttpQueryInfoA
InternetReadFile
InternetOpenA
InternetOpenUrlA
InternetCloseHandle
shlwapi
StrNCatA
StrStrA
SHDeleteValueA
StrToIntA
kernel32
ReadFile
GetVolumeInformationA
GetModuleFileNameA
CreateMutexA
GetCommandLineA
lstrlenA
lstrcatA
OutputDebugStringA
GetVersionExA
FlushFileBuffers
GetLastError
WriteFile
Sleep
CreateProcessA
ExitProcess
GetFileSize
SetFilePointer
CreateFileA
DeleteFileA
GetTempPathA
lstrcpyA
CloseHandle
user32
wsprintfA
GetSystemMetrics
advapi32
RegOpenKeyExA
RegEnumKeyExA
RegFlushKey
RegCloseKey
RegCreateKeyA
RegSetValueExA
ole32
CoInitialize
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ