Static task
static1
Behavioral task
behavioral1
Sample
95ff59152474c1f911a917d6a0b947588f7937a979c35b2d7dae7bdc7da4c058.exe
Resource
win7-20220812-en
General
-
Target
95ff59152474c1f911a917d6a0b947588f7937a979c35b2d7dae7bdc7da4c058
-
Size
186KB
-
MD5
c9c5f5867291a4787b8e74093473894b
-
SHA1
5f14348a30c199468e9ae4b132071a8913d41ce1
-
SHA256
95ff59152474c1f911a917d6a0b947588f7937a979c35b2d7dae7bdc7da4c058
-
SHA512
2dfa98e93d4e427beb74d419779288563fb8c7a75c96d43fb8dab63ecac7aaa03ee2ff5303b65424d1264c7e130571e678b907742df1b7aa899e3f8c5286fea0
-
SSDEEP
3072:NMbhaJBABj5c/MSola9gSNt7ORJpi5nWBDYBb+y7W1G/uduSncEGB/4VB6bsUIp5:Ihaajdtl02JfD42duxsUIpP6Y
Malware Config
Signatures
Files
-
95ff59152474c1f911a917d6a0b947588f7937a979c35b2d7dae7bdc7da4c058.exe windows x86
fa38a9621c7f79f70568c2ab36891cdc
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
setupapi
CM_Get_Child
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status
kernel32
LoadLibraryA
UnhandledExceptionFilter
lstrcmpA
GetEnvironmentStrings
LCMapStringA
GetFileAttributesA
SetFilePointer
AddAtomA
MultiByteToWideChar
EnterCriticalSection
GetEnvironmentStringsW
GetStartupInfoA
MulDiv
GetFullPathNameA
IsBadReadPtr
FreeEnvironmentStringsW
lstrcpynA
GetCurrentThreadId
FreeLibrary
GetCPInfo
SetStdHandle
GetStringTypeA
ReadFile
WideCharToMultiByte
EnumResourceNamesW
FreeEnvironmentStringsA
lstrcatA
DeleteCriticalSection
lstrcpyA
LeaveCriticalSection
GetLastError
FindFirstFileA
GetOEMCP
FlushFileBuffers
GetDiskFreeSpaceA
SetDllDirectoryW
GetModuleHandleA
GetTickCount
VirtualProtect
LCMapStringW
IsBadCodePtr
GetStringTypeW
lstrcmpiA
CreateFileA
CloseHandle
WriteFile
SetUnhandledExceptionFilter
GetThreadLocale
InitializeCriticalSection
Sleep
lstrlenA
GetProcAddress
RaiseException
Sections
.text Size: 98KB - Virtual size: 246KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 84KB - Virtual size: 83KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ