Static task
static1
Behavioral task
behavioral1
Sample
9f3e010c9db16b8b85c64079921e4951782778607408d04a7baeeec486de3c57.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
9f3e010c9db16b8b85c64079921e4951782778607408d04a7baeeec486de3c57.exe
Resource
win10v2004-20220812-en
General
-
Target
9f3e010c9db16b8b85c64079921e4951782778607408d04a7baeeec486de3c57
-
Size
173KB
-
MD5
ecace22b5233890a5678132c9f3ccdd5
-
SHA1
142ffee61aca0cab1189db6f232d7ab128894b1e
-
SHA256
9f3e010c9db16b8b85c64079921e4951782778607408d04a7baeeec486de3c57
-
SHA512
0003e0ffe0fd87fa40261e0e5f3da99d1532abcec2d1cffd2329f143b778dba49fd3a4298bac1012126f1ab19cf0ea54fb99ce4a852cdb35aad5153502f2b66e
-
SSDEEP
3072:DwRg8CcIfcNsXrEwGLmnWq6jjFXLky73xj27qSBWLQP9G2w:DoCcIfwbwMmnojjFNTZStGQPjw
Malware Config
Signatures
Files
-
9f3e010c9db16b8b85c64079921e4951782778607408d04a7baeeec486de3c57.exe windows x86
a69b9878329fd2f93979aeddf3f3190c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
shell32
ShellExecuteA
Shell_NotifyIconA
rpcrt4
UuidCreate
shlwapi
GetAcceptLanguagesA
PathIsRelativeW
UrlCreateFromPathW
PathFindExtensionW
PathCreateFromUrlW
UrlUnescapeW
StrCmpIW
PathAppendW
PathRemoveFileSpecW
PathCombineW
kernel32
GlobalFindAtomW
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetProcessHeap
InterlockedExchange
VirtualProtect
GetCurrentProcess
IsDebuggerPresent
GetCurrentProcessId
GetCurrentThreadId
EnumResourceLanguagesA
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetPrivateProfileIntW
GetStartupInfoA
FoldStringW
InterlockedCompareExchange
GetLocaleInfoW
LocalAlloc
GetTickCount
GetModuleHandleW
DeleteFileW
Sections
.text Size: 91KB - Virtual size: 487KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 78KB - Virtual size: 78KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ