Static task
static1
Behavioral task
behavioral1
Sample
9166ba0be6892c87b8bf5bba5e5cd109ba5229f58ca3bbf98da43b286b6722ca.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9166ba0be6892c87b8bf5bba5e5cd109ba5229f58ca3bbf98da43b286b6722ca.exe
Resource
win10v2004-20221111-en
General
-
Target
9166ba0be6892c87b8bf5bba5e5cd109ba5229f58ca3bbf98da43b286b6722ca
-
Size
172KB
-
MD5
3b320868db3d5b728b4efbf77dedf186
-
SHA1
ed5f6b37e5c96b1c71047906385558c82fde3de0
-
SHA256
9166ba0be6892c87b8bf5bba5e5cd109ba5229f58ca3bbf98da43b286b6722ca
-
SHA512
8b4a3da5dd70d8f073a513987df18e9bbe905597c524152b2ebd7ad119e73853d0b227fe1894c923a5bb097df8adba61f0eaa6d812f5fbc8340ee690b3734f52
-
SSDEEP
3072:n+2ZbG8rRNMCojJwfjle9gG5hC+Eq1y8+ihTZuUkg1+sFgBSKFZjreQE/DUTHuuc:+2ZbfSCZfjM5hZEqwJihTXrk8/DsHuyE
Malware Config
Signatures
Files
-
9166ba0be6892c87b8bf5bba5e5cd109ba5229f58ca3bbf98da43b286b6722ca.exe windows x86
05657a463c9aa5e1258b6a5a516beafb
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetSystemTimeAsFileTime
SetFilePointer
GetLocaleInfoA
GlobalGetAtomNameA
GetCPInfo
IsValidCodePage
GetDateFormatA
FreeLibrary
WriteConsoleA
TerminateProcess
GetConsoleOutputCP
VirtualAlloc
SetUnhandledExceptionFilter
GetTimeFormatA
GetOEMCP
HeapReAlloc
EnumResourceNamesW
IsDebuggerPresent
LeaveCriticalSection
GetACP
LoadLibraryA
MultiByteToWideChar
GetStringTypeA
HeapSize
UnhandledExceptionFilter
WriteFile
SetStdHandle
RtlUnwind
GetCurrentProcess
GetCurrentProcessId
EnterCriticalSection
InitializeCriticalSection
RaiseException
rpcrt4
RpcStringFreeA
shlwapi
SHCreateStreamOnFileW
PathIsContentTypeA
PathIsFileSpecA
PathAppendA
SHCreateStreamOnFileEx
PathCreateFromUrlW
Sections
.text Size: 89KB - Virtual size: 484KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 80KB - Virtual size: 79KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ