Static task
static1
Behavioral task
behavioral1
Sample
c9386e6b813c2cadfb901bea79922af9713e3df128b813be592ccd2c89c5a175.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
c9386e6b813c2cadfb901bea79922af9713e3df128b813be592ccd2c89c5a175.exe
Resource
win10v2004-20221111-en
General
-
Target
c9386e6b813c2cadfb901bea79922af9713e3df128b813be592ccd2c89c5a175
-
Size
724KB
-
MD5
bab957ef0db563a42e623c87d04df413
-
SHA1
7a5f52bb69260ade153cc2ccd45c7ea4341eb364
-
SHA256
c9386e6b813c2cadfb901bea79922af9713e3df128b813be592ccd2c89c5a175
-
SHA512
9bd251a8a7c1f2d29979dbb5229eee7f892b9869a9feae39086367230dbdaa8cb9f56cd50a765364557cf4e9d70ea42f263dca62e292eace33f288d6712bc614
-
SSDEEP
12288:JgqlCHQKL1Md8wC5lOrhFzWQ9Ako+//+6/OVlrsHy8/TX0YG9Kc1ekXqaxK6LPZg:+qlCHH1MyV5lObLAko+//+AOLWLXHG9q
Malware Config
Signatures
Files
-
c9386e6b813c2cadfb901bea79922af9713e3df128b813be592ccd2c89c5a175.exe windows x86
be91db234e2dd7d3f678f4f40db1d700
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
CloseHandle
GetModuleHandleA
LoadLibraryA
VirtualAlloc
VirtualFree
GetModuleFileNameA
ExitProcess
user32
InsertMenuA
advapi32
RegCloseKey
oleaut32
SafeArrayGetUBound
mpr
WNetGetUserA
version
GetFileVersionInfoSizeA
gdi32
GetBrushOrgEx
comctl32
ImageList_Create
shell32
ShellExecuteA
wininet
InternetReadFile
wsock32
WSAAsyncGetServByName
ws2_32
WSAStartup
urlmon
URLDownloadToFileA
Sections
CODE Size: - Virtual size: 433KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BSS Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 20B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.cxz0 Size: - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 9KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.cxz1 Size: - Virtual size: 546KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
.cxz2 Size: 713KB - Virtual size: 713KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 396B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ