Static task
static1
Behavioral task
behavioral1
Sample
9ae5bc68bc65012b4ba7b4808ac85e9e2b53a9d095a2aa00a22a0114e683013b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9ae5bc68bc65012b4ba7b4808ac85e9e2b53a9d095a2aa00a22a0114e683013b.exe
Resource
win10v2004-20220812-en
General
-
Target
9ae5bc68bc65012b4ba7b4808ac85e9e2b53a9d095a2aa00a22a0114e683013b
-
Size
172KB
-
MD5
1aa133565e1bbbba81986f30cf910a2e
-
SHA1
58a4b22972bf649b2ee23bb03242ef5a60d1bf09
-
SHA256
9ae5bc68bc65012b4ba7b4808ac85e9e2b53a9d095a2aa00a22a0114e683013b
-
SHA512
ac22d4847c1071c84958257ac365258048b3a6ba63c56656969ba833cd5ce68683f80f675aa39d060ba04cdc9434b7ae14f38dc228b24677fea249d41fa4db6c
-
SSDEEP
3072:MRvWo2N7b5aiqHFxVOJyXFv+olKfRkqFwaFqPACJPI2cBGzDFu16LR:MRvWL71rgxVO0XFGoEkqQPACCVmM6L
Malware Config
Signatures
Files
-
9ae5bc68bc65012b4ba7b4808ac85e9e2b53a9d095a2aa00a22a0114e683013b.exe windows x86
8c31296900d9d556da7a18dd800a538e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapReAlloc
SetFilePointer
FreeLibrary
GetOEMCP
WriteConsoleA
GetAtomNameA
WriteFile
HeapSize
GetConsoleOutputCP
UnhandledExceptionFilter
EnterCriticalSection
LeaveCriticalSection
GetLocaleInfoA
RtlUnwind
GetCurrentProcessId
InitializeCriticalSection
GetTimeFormatA
MultiByteToWideChar
GetACP
EnumResourceNamesA
IsValidCodePage
GetCurrentProcess
GetCPInfo
GetStringTypeW
GetSystemTimeAsFileTime
GetDateFormatA
VirtualAlloc
IsDebuggerPresent
SetUnhandledExceptionFilter
LoadLibraryA
TerminateProcess
SetStdHandle
RaiseException
rpcrt4
RpcStringFreeA
shlwapi
SHCreateStreamOnFileW
PathIsFileSpecA
SHCreateStreamOnFileEx
PathIsContentTypeA
PathAppendA
PathCreateFromUrlW
Sections
.text Size: 89KB - Virtual size: 480KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 80KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ