Static task
static1
Behavioral task
behavioral1
Sample
9bc034b6172eec67d8254b81c829c2e5dbeba3d02198c4aecf7d3bf467b13724.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
9bc034b6172eec67d8254b81c829c2e5dbeba3d02198c4aecf7d3bf467b13724.exe
Resource
win10v2004-20221111-en
General
-
Target
9bc034b6172eec67d8254b81c829c2e5dbeba3d02198c4aecf7d3bf467b13724
-
Size
768KB
-
MD5
dd4eb91fb2056a49114c7fb3ad5dc8ce
-
SHA1
760c52ddc8b3de536c2a2780338f9f6b288a85b9
-
SHA256
9bc034b6172eec67d8254b81c829c2e5dbeba3d02198c4aecf7d3bf467b13724
-
SHA512
c92cc8ef5167e56d82da04216cf4f610ca0ed323a9a7271f574b82f2794565aeabb8f8d736b49c20e05a138e5be862614363fc1a7476739cb2e9fe3551fb6e36
-
SSDEEP
24576:X3S3fWqnfct5QwgULWCc3cIeQJyJSW7B6:HSP7nUcOc3cBX7g
Malware Config
Signatures
Files
-
9bc034b6172eec67d8254b81c829c2e5dbeba3d02198c4aecf7d3bf467b13724.exe windows x86
592d0990d912f8c8a53c7084be07356a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
GlobalFree
SetLastError
GetPriorityClass
GetFileAttributesA
CreateSemaphoreA
GetStdHandle
CreateDirectoryW
SetLastError
GetTickCount
HeapSize
ReadConsoleW
GetLocalTime
GetProcessHeap
LoadLibraryA
CreateMutexW
VirtualProtect
CreateHardLinkW
SetEvent
DeleteFileW
GetStartupInfoA
wintrust
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
DllUnregisterServer
traffic
TcAddFlow
TcDeleteFilter
TcDeleteFlow
TcAddFilter
Sections
.text Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 760KB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE