Static task
static1
Behavioral task
behavioral1
Sample
9e76b438a0c9e877b2c70daa7a0907d1b971cb6b459ab3b77a71f261bc7bbec2.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
9e76b438a0c9e877b2c70daa7a0907d1b971cb6b459ab3b77a71f261bc7bbec2.exe
Resource
win10v2004-20220901-en
General
-
Target
9e76b438a0c9e877b2c70daa7a0907d1b971cb6b459ab3b77a71f261bc7bbec2
-
Size
168KB
-
MD5
1a1a511b19c55ea01551a781a0e9ff55
-
SHA1
96570ad8afbefd0df784c17971313173ff0600f7
-
SHA256
9e76b438a0c9e877b2c70daa7a0907d1b971cb6b459ab3b77a71f261bc7bbec2
-
SHA512
088c06049258861022c5006ace82f0cb9b0fd03146dc0b8a07b18a151e2d96ccd9bc029697a30ccbf25f52942e72f62165ce3783ad9553856706264de1157bec
-
SSDEEP
3072:rD9aojr4GJnPRsWGTuTO8D7ZTBvYZgnpHphHkRaJB1P+76h8y7hm5D1muwGn/aDm:H9a3G5psjTuTFqZgnBcAyy7e1b3e3C3t
Malware Config
Signatures
Files
-
9e76b438a0c9e877b2c70daa7a0907d1b971cb6b459ab3b77a71f261bc7bbec2.exe windows x86
8435cb7777a37cc8aef6f323299e73ca
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
setupapi
CM_Get_Global_State
SetupDiGetDeviceRegistryPropertyW
CMP_WaitNoPendingInstallEvents
CM_Get_DevNode_Status
kernel32
WideCharToMultiByte
AddAtomA
IsBadReadPtr
MulDiv
SetStdHandle
LoadLibraryA
IsBadCodePtr
FindFirstFileA
CloseHandle
LCMapStringW
UnhandledExceptionFilter
SetFilePointer
GetStringTypeW
GetCurrentThreadId
lstrcmpiA
FreeEnvironmentStringsA
GetTickCount
GetEnvironmentStringsW
lstrcmpA
GetCPInfo
ReadFile
GetFileAttributesA
GetOEMCP
SetUnhandledExceptionFilter
lstrcatA
GetFullPathNameA
lstrcpynA
EnterCriticalSection
FreeEnvironmentStringsW
lstrcpyA
EnumResourceNamesW
GetEnvironmentStrings
FreeLibrary
WriteFile
GetThreadLocale
CreateFileA
lstrlenA
GetProcAddress
lstrlenW
GetModuleHandleA
MultiByteToWideChar
GetLastError
GetStartupInfoA
DeleteCriticalSection
Sleep
InitializeCriticalSection
LeaveCriticalSection
GetDiskFreeSpaceA
GetStringTypeA
LCMapStringA
FlushFileBuffers
VirtualProtect
RaiseException
Sections
.text Size: 85KB - Virtual size: 485KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 79KB - Virtual size: 79KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ