Static task
static1
Behavioral task
behavioral1
Sample
9e760533b89150f457f54265d3fdf9c864771ad3dc45145c4f94907da3b1065b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9e760533b89150f457f54265d3fdf9c864771ad3dc45145c4f94907da3b1065b.exe
Resource
win10v2004-20221111-en
General
-
Target
9e760533b89150f457f54265d3fdf9c864771ad3dc45145c4f94907da3b1065b
-
Size
178KB
-
MD5
e9a2af4b89603018260ca512d9f2a1ef
-
SHA1
05f90e56a455bab852c8527565785230e6e6b41a
-
SHA256
9e760533b89150f457f54265d3fdf9c864771ad3dc45145c4f94907da3b1065b
-
SHA512
0524b7119f73135ce3d71140168e6ca5321d4f5fd3e2591ceff7252236781c469abe06d227522f7fe8d26cdb956ffe2730303653d4f221859becc8fc2a0e2568
-
SSDEEP
3072:7ryPnBg8nw8MPYhq4XzcylvfhkTnuN727aw0BXLU8Dt:7ryPBg8w85hqetfhmuY70BXLU8B
Malware Config
Signatures
Files
-
9e760533b89150f457f54265d3fdf9c864771ad3dc45145c4f94907da3b1065b.exe windows x86
245c8d7d856ec1286048b9a0ce591823
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
oleacc
LresultFromObject
CreateStdAccessibleObject
shell32
SHGetMalloc
SHGetPathFromIDListA
SHGetSpecialFolderLocation
shlwapi
PathFileExistsW
ole32
StringFromIID
CoTaskMemFree
ProgIDFromCLSID
StringFromCLSID
kernel32
VirtualQueryEx
LocalAlloc
GetSystemTimeAsFileTime
MultiByteToWideChar
EnumResourceNamesA
WideCharToMultiByte
CreateProcessA
RaiseException
lstrlenA
OpenJobObjectA
InterlockedExchange
advapi32
RegDeleteKeyA
RegEnumKeyExA
RegOpenKeyA
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
RegCloseKey
RegSetValueExA
Sections
.text Size: 111KB - Virtual size: 111KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.tls Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 63KB - Virtual size: 62KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ