Static task
static1
Behavioral task
behavioral1
Sample
9e41be018adfe1f5ce0db67891fd2a3231eab10b2159d71b31743ffb1b76958f.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
9e41be018adfe1f5ce0db67891fd2a3231eab10b2159d71b31743ffb1b76958f.exe
Resource
win10v2004-20221111-en
General
-
Target
9e41be018adfe1f5ce0db67891fd2a3231eab10b2159d71b31743ffb1b76958f
-
Size
740KB
-
MD5
56528527d81ac48c74db2ff345e925ad
-
SHA1
6fa65b2c7497eca1c4678bf67a58ec94e76f268f
-
SHA256
9e41be018adfe1f5ce0db67891fd2a3231eab10b2159d71b31743ffb1b76958f
-
SHA512
deb55f5a3f21001e22e430ef5ce09b9694e8c7f13d70a77872513c6a4ae20d4bc293e5c318c3376e083352708d7331ac8c0c770661cec8ec5f5e873d49aeeba1
-
SSDEEP
12288:xJKzgAKN8KJBXxxY/NNNf3G1fzm/x3v6/QhBQYIl6ZR2Y3h5INwEL3gPQX3SvMR:xwJKL1+NNNu1LMx3P4lSR2Y3h+NrgPQ1
Malware Config
Signatures
Files
-
9e41be018adfe1f5ce0db67891fd2a3231eab10b2159d71b31743ffb1b76958f.exe windows x86
d37444136fe53539ad913af4a1a9d48e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
IsValidCodePage
GetTempPathA
GetLastError
ExitProcess
VirtualProtect
SetEvent
GetPrivateProfileStringA
lstrcmpiA
HeapDestroy
GetStdHandle
GetTickCount
HeapSize
CreateHardLinkA
GetModuleHandleA
CloseHandle
GetStartupInfoA
ResumeThread
DeleteTimerQueue
DeleteCriticalSection
ReleaseMutex
GetDriveTypeA
advapi32
LsaClose
IsWellKnownSid
LsaSetSecret
AccessCheck
GetSecurityInfo
RegCloseKey
GetFileSecurityA
CloseTrace
RegEnumKeyExA
IsValidAcl
IsValidSid
RegEnumValueA
FreeSid
RegCreateKeyExA
RegLoadKeyA
RegQueryValueExA
CloseEventLog
ReportEventA
OpenEventLogA
LsaFreeMemory
apphelp
ApphelpCheckIME
SdbFreeFlagInfo
ApphelpShowDialog
SdbFindFirstTag
SdbFindNextTag
user32
CreateWindowExA
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE