Static task
static1
Behavioral task
behavioral1
Sample
f9b0934e616baf6de0ccbcca5e0f2c88276ec2d422d8ab2cfd1e230cb0badb5c.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
f9b0934e616baf6de0ccbcca5e0f2c88276ec2d422d8ab2cfd1e230cb0badb5c.exe
Resource
win10v2004-20220812-en
General
-
Target
f9b0934e616baf6de0ccbcca5e0f2c88276ec2d422d8ab2cfd1e230cb0badb5c
-
Size
333KB
-
MD5
1264ed65111d709d29d036120896240d
-
SHA1
e686f63cbe13cd771642b0a6b617eeabb742b059
-
SHA256
f9b0934e616baf6de0ccbcca5e0f2c88276ec2d422d8ab2cfd1e230cb0badb5c
-
SHA512
c1d9a834b0d2c71493cf09f9c0d306e03b009fc007bf9204d7c4ddbfc65b34ae626be62344d983f4aa292fb24706a1af6d90f7268d805dcab0386c11ed1af7ce
-
SSDEEP
6144:r/IW4JMsvY8nHmKGuRvvFuSJvbWjw960RDvbjJD2VJq4r+G:rMJMGmVuRvdnJvbWjw9601bqBf
Malware Config
Signatures
Files
-
f9b0934e616baf6de0ccbcca5e0f2c88276ec2d422d8ab2cfd1e230cb0badb5c.exe windows x86
b2f92e151b604a0c59c20b7089df0ea2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
AddAtomA
GetDiskFreeSpaceA
ResumeThread
DeleteCriticalSection
CreateHardLinkA
HeapDestroy
GetLastError
SearchPathA
GetThreadLocale
VirtualProtect
GetStartupInfoA
ReleaseMutex
GetTickCount
ExitProcess
GetModuleHandleA
CloseHandle
SetEvent
Sleep
TlsGetValue
lstrcmpiA
advapi32
FreeSid
CloseTrace
LsaFreeMemory
IsValidSid
RegEnumKeyExA
GetFileSecurityA
LsaSetSecret
OpenEventLogA
RegCreateKeyExA
CloseEventLog
LsaClose
AccessCheck
RegCloseKey
RegLoadKeyA
cfgmgr32
CM_Delete_Range
CM_Add_Range
CM_First_Range
CM_Add_IDA
CM_Get_Child
shell32
DragQueryFileA
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 792KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ