Static task
static1
Behavioral task
behavioral1
Sample
9c00c6ec0ec8f6250c31f34f8498e994d2f3d38b161c228b48c6a5323a56690d.exe
Resource
win7-20220812-en
General
-
Target
9c00c6ec0ec8f6250c31f34f8498e994d2f3d38b161c228b48c6a5323a56690d
-
Size
182KB
-
MD5
d128782d4b69cc855eec6be9746a56d1
-
SHA1
10154972cd7cbf9376e5aa64feb694e1ae5da7ef
-
SHA256
9c00c6ec0ec8f6250c31f34f8498e994d2f3d38b161c228b48c6a5323a56690d
-
SHA512
c3b241807db04ad50f5e901ff5291e7b3f1d687c103f81e5641e05faa61d6492b47c2da2cd24a1cf9ff2d7a6e000daa7d1d1fea25a8f4317f7231873dad100a2
-
SSDEEP
3072:e6ZyXOEafRwL8rGAj9Iu6QmEmrlyZU7yKTWSBgE3hECEHJZzxUtA:RZyXSRwL85ZrBmrWUD7BgE3hEtJZzxy
Malware Config
Signatures
Files
-
9c00c6ec0ec8f6250c31f34f8498e994d2f3d38b161c228b48c6a5323a56690d.exe windows x86
d57fe2e74cf7c067b0abc07942416c5e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
mprapi
MprConfigServerConnect
MprConfigServerDisconnect
MprConfigGetFriendlyName
kernel32
MulDiv
MultiByteToWideChar
GetAtomNameW
GetProcAddress
SetFilePointer
GetWindowsDirectoryW
WritePrivateProfileStringW
FreeLibrary
GlobalAlloc
DeleteFileW
EnumResourceNamesA
GetModuleHandleW
GetPrivateProfileStringW
WaitForSingleObject
GetExitCodeProcess
FindFirstFileW
ReadFile
BeginUpdateResourceW
LoadLibraryExW
FindNextFileW
WriteFile
FindClose
GlobalFree
iphlpapi
GetIpAddrTable
newdev
UpdateDriverForPlugAndPlayDevicesW
occache
FindControlClose
rpcrt4
NdrConformantArrayFree
UuidCreate
shell32
SHGetSpecialFolderPathW
ShellExecuteExW
ole32
CoCreateInstance
CoFileTimeNow
CoUninitialize
StgOpenStorage
CoInitialize
Sections
.text Size: 100KB - Virtual size: 99KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 78KB - Virtual size: 78KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 264KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ