Static task
static1
Behavioral task
behavioral1
Sample
92b08d99375eed4c8cd04897a5b29e94b8e2380cf66f92cc2f02344e44fa55da.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
92b08d99375eed4c8cd04897a5b29e94b8e2380cf66f92cc2f02344e44fa55da.exe
Resource
win10v2004-20221111-en
General
-
Target
92b08d99375eed4c8cd04897a5b29e94b8e2380cf66f92cc2f02344e44fa55da
-
Size
28KB
-
MD5
c9ad82ae445439a0933a79be0b9d72f2
-
SHA1
869349eeb6034557798124ad1a2c51e965e87d8c
-
SHA256
92b08d99375eed4c8cd04897a5b29e94b8e2380cf66f92cc2f02344e44fa55da
-
SHA512
68a963ff1f94f5902b5bd379055dcf85f99e8cb15b34b4b28fb2b3be02f95ff07434ebf29d537eb7a942918909352addc28728f92a4b10ed73b5f70ecb9b3f33
-
SSDEEP
192:D9DpmAWoA1oEvJd9oDsCdU1WAL6QoAiJw9SsMTqOadRWwO2ewCP:JVmfoACEvJ0mzZMJw9/M+dBO/P
Malware Config
Signatures
Files
-
92b08d99375eed4c8cd04897a5b29e94b8e2380cf66f92cc2f02344e44fa55da.exe windows x86
f90772e558a7aa1cfae0e3623a3b5f39
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetComputerNameA
OpenEventA
CreateEventA
GetVersionExA
SetComputerNameExA
GetProcessHeap
GetModuleHandleA
ExitProcess
HeapAlloc
GetCommandLineA
IsBadReadPtr
CloseHandle
ReadFile
GetFileSize
CreateFileA
WriteFile
WaitForSingleObject
CreateProcessA
GetStartupInfoA
GetModuleFileNameA
GetCurrentDirectoryA
GetTempFileNameA
GetTempPathA
GetWindowsDirectoryA
GetSystemDirectoryA
SetEnvironmentVariableA
HeapFree
ExpandEnvironmentStringsA
advapi32
RegCreateKeyExA
RegSetValueExA
RegOpenKeyA
RegQueryValueExA
RegCloseKey
GetUserNameA
user32
ReleaseDC
wsprintfA
MessageBoxA
SystemParametersInfoA
GetDC
gdi32
GetDeviceCaps
msvcrt
??3@YAXPAX@Z
strncmp
??2@YAPAXI@Z
strrchr
_strnicmp
Sections
.text Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 376B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE