Static task
static1
Behavioral task
behavioral1
Sample
9fdf2aa6e36dd4e03410d4c355d60b2ecd2f7ce2d0f0a1f753ba06cd9472cffb.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9fdf2aa6e36dd4e03410d4c355d60b2ecd2f7ce2d0f0a1f753ba06cd9472cffb.exe
Resource
win10v2004-20221111-en
General
-
Target
9fdf2aa6e36dd4e03410d4c355d60b2ecd2f7ce2d0f0a1f753ba06cd9472cffb
-
Size
400KB
-
MD5
495fa98b1a5fc58cf931eb155c6a176f
-
SHA1
d4800c2537fa3a9df16025527cb7b00eccd37a6e
-
SHA256
9fdf2aa6e36dd4e03410d4c355d60b2ecd2f7ce2d0f0a1f753ba06cd9472cffb
-
SHA512
a4a54036f430422847e6dcc44e32445d2d3977fcdedf60a124f0a14e85d9c0234aa01840fe56927bfe45674613cb677d181c3dbd12ef280d22a6211b167a33c9
-
SSDEEP
6144:xCLGAAlqCueARQjrRjOnVATb44oCceB+2x0N5T2KrjKJfnh:8IUClAWpjOVbONSv6J
Malware Config
Signatures
Files
-
9fdf2aa6e36dd4e03410d4c355d60b2ecd2f7ce2d0f0a1f753ba06cd9472cffb.exe windows x86
84d0ccaa3a4777c31409986433fa5354
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ole32
CoCreateInstance
CoTaskMemFree
CLSIDFromString
CoTaskMemAlloc
CoInitialize
CoUninitialize
kernel32
SetLastError
SetEndOfFile
PrepareTape
GetLogicalDriveStringsA
GetProcAddress
GetModuleHandleA
DeleteCriticalSection
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoA
LeaveCriticalSection
EnterCriticalSection
GetLastError
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
SetHandleCount
GetStdHandle
GetFileType
RtlUnwind
MultiByteToWideChar
CloseHandle
ReadFile
WriteFile
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
ExitProcess
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
GetCurrentThreadId
InterlockedDecrement
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
RaiseException
InitializeCriticalSection
Sleep
VirtualAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
CreateFileA
SetStdHandle
FlushFileBuffers
SetFilePointer
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
LoadLibraryA
HeapSize
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
Sections
.text Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 171KB - Virtual size: 170KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 155KB - Virtual size: 177KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 448B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ