Static task
static1
Behavioral task
behavioral1
Sample
9191047428f9ac7f92badcb1a9dbd001b7948adebe0851e54b4a359278f9b1da.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
9191047428f9ac7f92badcb1a9dbd001b7948adebe0851e54b4a359278f9b1da.exe
Resource
win10v2004-20221111-en
General
-
Target
9191047428f9ac7f92badcb1a9dbd001b7948adebe0851e54b4a359278f9b1da
-
Size
449KB
-
MD5
26c5062d2a29b6b3439225d6ad3d6950
-
SHA1
26a39876faabd8d6ac7a904b08226182c7bd63eb
-
SHA256
9191047428f9ac7f92badcb1a9dbd001b7948adebe0851e54b4a359278f9b1da
-
SHA512
a3ec1a40a40af69c2d15eb1a41c0f06c39fd7c007a37b22623f61cbfc94cc76a1b684672375a43dd0b96fb7c673ad263f125e90e98c323b7fbdcd80493ecd70d
-
SSDEEP
6144:cBFswXYdu9Do7cNM4y3ETHfoiZsHjmqDoNXZocJVkFh49rCgmcvkokfNPb2Fourq:cTrIdgGE7AysHT2ZzrLFnC2Phun7cUn
Malware Config
Signatures
Files
-
9191047428f9ac7f92badcb1a9dbd001b7948adebe0851e54b4a359278f9b1da.exe windows x86
e6eb2004ac3962f7a3eb089fa1c4b977
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mswsock
GetServiceW
SetServiceW
EnumProtocolsW
kernel32
ExitProcess
SetTapeParameters
InterlockedExchange
ResetEvent
VirtualFree
SetSystemPowerState
FileTimeToSystemTime
GetSystemInfo
GetSystemTimeAsFileTime
CopyFileW
VirtualAlloc
CreateDirectoryW
GetVersion
CreateEventW
VirtualProtect
EnterCriticalSection
InitializeCriticalSection
GetCPInfo
GetVolumeInformationW
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleA
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
GetLastError
WriteFile
GetStdHandle
GetModuleFileNameA
GetModuleFileNameW
FreeEnvironmentStringsA
MultiByteToWideChar
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
HeapDestroy
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
LCMapStringA
WideCharToMultiByte
LCMapStringW
GetStringTypeA
GetStringTypeW
LeaveCriticalSection
Sleep
GetLocaleInfoA
LoadLibraryA
HeapReAlloc
RtlUnwind
HeapSize
Sections
.text Size: 269KB - Virtual size: 269KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 172KB - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 61KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ