Static task
static1
Behavioral task
behavioral1
Sample
9a487746836e9ad744fefccb117904d1a31f3967c28e13b2476729663a64a037.exe
Resource
win7-20220812-en
General
-
Target
9a487746836e9ad744fefccb117904d1a31f3967c28e13b2476729663a64a037
-
Size
104KB
-
MD5
35777ea317fc62e9c16f5167b038a02f
-
SHA1
a8eeda51676ddc40c4ba15e07bb04df957f115ab
-
SHA256
9a487746836e9ad744fefccb117904d1a31f3967c28e13b2476729663a64a037
-
SHA512
18a9ab297f85c661897fa6f98bb9636b9d14cb3abfcb7cd035138381e489c99e048d63bd01785189841958f7516f63d08cd64ee6568b721c84dd304c1dcb2ca5
-
SSDEEP
1536:Ft6tG59azMsd9ZobvWIXa0B3SVnZtXNCPIb70P295TuYK6I5uEWD:FtzoNd9ZobvWIXai3GnZt9Ca7HvTDp
Malware Config
Signatures
Files
-
9a487746836e9ad744fefccb117904d1a31f3967c28e13b2476729663a64a037.exe windows x86
76c948c409ced3a28e837346e34b85dd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegCreateKeyExA
RegOpenKeyExA
RegDeleteKeyA
RegEnumKeyExA
RegQueryValueExA
RegDeleteValueA
RegSetValueExA
RegCloseKey
kernel32
TerminateProcess
GetCurrentProcess
GetTimeZoneInformation
GetSystemTime
GetLocalTime
ExitProcess
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
HeapFree
GetLastError
CloseHandle
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
WideCharToMultiByte
LCMapStringA
LCMapStringW
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
WriteFile
HeapAlloc
VirtualAlloc
HeapReAlloc
SetStdHandle
FlushFileBuffers
CreateFileA
ReadFile
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
SetFilePointer
SetEndOfFile
CompareStringA
CompareStringW
SetEnvironmentVariableA
Sections
.text Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE