Static task
static1
Behavioral task
behavioral1
Sample
a9c5bfdaba0b93a4bd25765f622bb0c4c493f2ff5d8072ed849875573c0735c0.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
a9c5bfdaba0b93a4bd25765f622bb0c4c493f2ff5d8072ed849875573c0735c0.exe
Resource
win10v2004-20221111-en
General
-
Target
a9c5bfdaba0b93a4bd25765f622bb0c4c493f2ff5d8072ed849875573c0735c0
-
Size
7KB
-
MD5
f7b48dfe0f467e473b0515c32c0d4eae
-
SHA1
f391dfb4c4a6dd7a9207af0cf6a9053a329a23e0
-
SHA256
a9c5bfdaba0b93a4bd25765f622bb0c4c493f2ff5d8072ed849875573c0735c0
-
SHA512
99f88b61a7384629960dcbc62a8c24a22df5418adeefaba51be614c6d14a2688ce57d2c0700722828ef485b2ff024924b68d4250e3af497405339a93012a5008
-
SSDEEP
96:fAl3AbrsyKorBhzaqkaFrl8n7VbKREbUqv5XyjkiZ9+543BXufOfAAlQzlXyZ/s:Y3AbCg59vrloVbHb1yjkl5iXRIWQp+/
Malware Config
Signatures
Files
-
a9c5bfdaba0b93a4bd25765f622bb0c4c493f2ff5d8072ed849875573c0735c0.exe windows x86
e12958d81c1563c107c39f6521507901
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTempPathA
WriteProcessMemory
GetCurrentProcess
CloseHandle
WriteFile
CreateFileA
WritePrivateProfileStringA
SetFilePointer
LoadLibraryA
GetFileSize
SetUnhandledExceptionFilter
GetTickCount
GetModuleHandleA
GetCommandLineA
GetStartupInfoA
GetProcAddress
GetModuleFileNameA
FreeLibrary
Sleep
GetLocalTime
ReadFile
GetVersionExA
ExitProcess
HeapFree
HeapAlloc
GetProcessHeap
user32
wsprintfA
advapi32
RegOpenKeyA
RegQueryValueExA
RegSetValueExA
RegCloseKey
shell32
ShellExecuteA
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 974B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE