Static task
static1
Behavioral task
behavioral1
Sample
9fad2bdfcfe82d0770b22e1a10b3a8f9a27d136e8151c2955c15c291d67dae87.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
9fad2bdfcfe82d0770b22e1a10b3a8f9a27d136e8151c2955c15c291d67dae87.exe
Resource
win10v2004-20220812-en
General
-
Target
9fad2bdfcfe82d0770b22e1a10b3a8f9a27d136e8151c2955c15c291d67dae87
-
Size
276KB
-
MD5
07a3d44a4a7167ea36205412178acc36
-
SHA1
cf2581ae7667cd163409137e1dda6832e461a11f
-
SHA256
9fad2bdfcfe82d0770b22e1a10b3a8f9a27d136e8151c2955c15c291d67dae87
-
SHA512
749505957f1325f51e82c23370c1b613a55f7d7a02c56387a2d22e361a864b907fd8c5ca8c02b030b55a1c4e36f15060d2165db98f7820f70db381485e9b0e34
-
SSDEEP
6144:n7zexaBoL04P/zB34TO01VPsvm/3HJ5faOoz:9Bu0Yrd4iEPsvm/3HJ5iPz
Malware Config
Signatures
Files
-
9fad2bdfcfe82d0770b22e1a10b3a8f9a27d136e8151c2955c15c291d67dae87.exe windows x86
1f8d0aa332d51d2d412a1e9978d9bc7b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
LoadLibraryA
GetModuleHandleA
CreateThread
WaitForSingleObject
GetLastError
HeapFree
HeapAlloc
GetCommandLineA
GetVersionExA
GetProcessHeap
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
RaiseException
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSection
Sleep
RtlUnwind
HeapSize
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
MultiByteToWideChar
GetLocaleInfoA
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
Sections
.text Size: 48KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 200KB - Virtual size: 197KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ