Static task
static1
Behavioral task
behavioral1
Sample
9ef75ceb38b2b2d4764ace873c8d7b9515709737345f0d493ea4f26e7bb98dad.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9ef75ceb38b2b2d4764ace873c8d7b9515709737345f0d493ea4f26e7bb98dad.exe
Resource
win10v2004-20220812-en
General
-
Target
9ef75ceb38b2b2d4764ace873c8d7b9515709737345f0d493ea4f26e7bb98dad
-
Size
316KB
-
MD5
025addba04ffd6cf76989f321a4e0b9d
-
SHA1
2fe1fecfe654e52edb66700d0fd68138a7615e56
-
SHA256
9ef75ceb38b2b2d4764ace873c8d7b9515709737345f0d493ea4f26e7bb98dad
-
SHA512
e0ede81ee0a98228d5cde239f3584eaa40897f33a2606a4714afa9d40c312a1a6eee1ddf1a02ec9341b17c683877cbc4932cbcbdb2dae896ce16818b8d667e76
-
SSDEEP
6144:bCXgDKdlSTnkiAZWTr94LkyB0rOmsVGtwXla+3jlsBQkVgKKzcYUgU:OXgDKdakzkr94Lk74ktsa+W+kmKKzEgU
Malware Config
Signatures
Files
-
9ef75ceb38b2b2d4764ace873c8d7b9515709737345f0d493ea4f26e7bb98dad.exe windows x86
e41af5c6a75f38c1f0d26ecd7a091395
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
InterlockedIncrement
SetLastError
LoadLibraryA
VirtualAlloc
LeaveCriticalSection
GlobalLock
FlushFileBuffers
SetEndOfFile
GetProcessHeap
IsDebuggerPresent
GetCurrentProcess
UnhandledExceptionFilter
GetCurrentProcessId
GetConsoleOutputCP
LocalAlloc
WriteConsoleA
FreeEnvironmentStringsA
GetEnvironmentVariableA
GetStartupInfoA
SetStdHandle
ExitProcess
HeapAlloc
lstrlenA
GetModuleHandleA
msvcrt
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_exit
_strcmpi
Sections
waiky Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 295KB - Virtual size: 295KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ