Static task
static1
Behavioral task
behavioral1
Sample
d9e436be80dc9285e381e387494b033173ef2113809c6d86f13fb2eb65ae0ada.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
d9e436be80dc9285e381e387494b033173ef2113809c6d86f13fb2eb65ae0ada.exe
Resource
win10v2004-20220812-en
General
-
Target
d9e436be80dc9285e381e387494b033173ef2113809c6d86f13fb2eb65ae0ada
-
Size
178KB
-
MD5
9a5cd029fdbd4734aee966d9c01ac6f5
-
SHA1
143ef13285f6e90fdc68e5ec30e2cc391cbf8e92
-
SHA256
d9e436be80dc9285e381e387494b033173ef2113809c6d86f13fb2eb65ae0ada
-
SHA512
4b0961c08271a7a759bcc2f78d1892d8f47c9b55cf2420cf22aa9c540c71e3c36b757cc1b0f7e52ed99189650c49dea9d5daa0acc59f7e701d3d6b8e6f71b465
-
SSDEEP
3072:aG2dCMJTFT5JIQdgGTq9X92C4dlFOpJ2SM1qcfvuA4ZdRLcr/x41KH5mOiIMI1:bCT5JIQdLqIC4dHTSM1ZuxPxcr/rkOCI
Malware Config
Signatures
Files
-
d9e436be80dc9285e381e387494b033173ef2113809c6d86f13fb2eb65ae0ada.exe windows x86
0fff7e7a3b6bc8249d4f0fddd8b346f7
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegQueryValueExA
RegOpenKeyExW
RegCreateKeyW
RegCreateKeyA
RegCreateKeyExW
RegSetValueExA
RegDeleteKeyW
RegOpenKeyExA
RegQueryValueExW
RegCloseKey
RegEnumValueW
RegDeleteValueW
ole32
IIDFromString
CoCreateInstance
psapi
GetModuleBaseNameW
kernel32
lstrcmpiW
FindNextFileA
VirtualQueryEx
HeapSetInformation
CreateEventW
CopyFileW
CreateProcessW
CreateDirectoryExA
LoadLibraryExW
LocalAlloc
GetExitCodeThread
FindFirstFileA
lstrcmpA
EnumResourceNamesW
InterlockedCompareExchange
DeleteFileA
FindClose
Heap32ListNext
SetFileAttributesA
lstrlenW
lstrcmpiA
lstrlenA
MultiByteToWideChar
WideCharToMultiByte
LoadLibraryW
LocalFree
RemoveDirectoryA
GetTempPathA
GetFileAttributesA
DeleteFileW
Sections
.text Size: 106KB - Virtual size: 106KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.tls Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ