Static task
static1
Behavioral task
behavioral1
Sample
9c3c947598f10ef5415a68e2a3c9aa16f34792a715a4a01d0a8a6f1662e564e1.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9c3c947598f10ef5415a68e2a3c9aa16f34792a715a4a01d0a8a6f1662e564e1.exe
Resource
win10v2004-20220812-en
General
-
Target
9c3c947598f10ef5415a68e2a3c9aa16f34792a715a4a01d0a8a6f1662e564e1
-
Size
359KB
-
MD5
06729a2a994f655789695cd78d7d736b
-
SHA1
8adc71e7914affcd4377358d9867502101589a98
-
SHA256
9c3c947598f10ef5415a68e2a3c9aa16f34792a715a4a01d0a8a6f1662e564e1
-
SHA512
fc6daad3fb52f4794aa18bc869a8ebb11498d1b727b1fe5ea79045d9ec6606f064bce0fdf6cb93120cbcaf72466609e4e2ce728aa8a2396d4722c065279b6ede
-
SSDEEP
6144:MV7kSdZBiEQXLhOv7G6BqYrlJAFBxCAPd5PMn+uIY8+YT6p0fKM:KDQbhOvi0AFBNPzPMn+ujYw0C
Malware Config
Signatures
Files
-
9c3c947598f10ef5415a68e2a3c9aa16f34792a715a4a01d0a8a6f1662e564e1.exe windows x86
0f3ebf32e2b8f5aea1251df8c6be5648
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ReleaseMutex
ExitProcess
GetPrivateProfileStringW
GetModuleHandleA
GetStartupInfoA
GetDriveTypeA
SetEvent
DeleteCriticalSection
HeapDestroy
HeapSize
VirtualProtect
GetTempPathA
ResumeThread
CreateHardLinkA
DeleteTimerQueue
IsValidCodePage
GetLastError
lstrcmpiA
CloseHandle
GetTickCount
AddAtomA
advapi32
RegEnumValueA
CloseEventLog
LsaFreeMemory
GetSecurityInfo
LsaClose
LsaSetSecret
IsWellKnownSid
GetFileSecurityA
RegCreateKeyExA
CloseEventLog
IsValidSid
AccessCheck
RegCloseKey
OpenEventLogA
RegQueryValueExA
RegEnumKeyExA
RegLoadKeyA
CloseTrace
apphelp
ApphelpShowDialog
ApphelpCheckIME
SdbFindFirstTag
SdbFindNextTag
SdbFreeFlagInfo
user32
CreateWindowExA
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ