Static task
static1
Behavioral task
behavioral1
Sample
91a01c77db59fcb5c976722dafcfb5ade73f14878b96c2af13276fa09f18e441.exe
Resource
win7-20220901-en
General
-
Target
91a01c77db59fcb5c976722dafcfb5ade73f14878b96c2af13276fa09f18e441
-
Size
42KB
-
MD5
6b6301c42e969b17baf7416bca79ee91
-
SHA1
a8ab667c1904d3024334939335b69255144a7f89
-
SHA256
91a01c77db59fcb5c976722dafcfb5ade73f14878b96c2af13276fa09f18e441
-
SHA512
ef305d644827ac23e526d228742d589b1ac6184b4569fad25de370299f7a16004138a63ce2efe4591d4a0f2d63d0d214cfc05d261eda8fab721442211e6a6d37
-
SSDEEP
768:+FAH6NK5d5qOJDRvtUOwMQFsWZaSfqBHNRF/LfWHnOqDA9:I06IrqIDFtUOwQWRk1fWHy9
Malware Config
Signatures
Files
-
91a01c77db59fcb5c976722dafcfb5ade73f14878b96c2af13276fa09f18e441.exe windows x86
bbd9e0a21398b30f34a86ae5e633ff7b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
mpr
WNetCloseEnum
WNetLogonNotify
WNetLogonNotify
WNetLogonNotify
WNetCloseEnum
WNetCloseEnum
WNetCloseEnum
WNetCloseEnum
WNetLogonNotify
WNetConnectionDialog
WNetCloseEnum
WNetCloseEnum
WNetCloseEnum
WNetCloseEnum
WNetCloseEnum
WNetCloseEnum
WNetCloseEnum
WNetCloseEnum
WNetCloseEnum
WNetLogonNotify
kernel32
GetSystemTime
LoadLibraryA
ReadProcessMemory
TerminateProcess
VirtualProtect
SleepEx
GetSystemTimeAsFileTime
TerminateProcess
CreateProcessA
CreateProcessW
VirtualProtectEx
Sleep
SleepEx
Sleep
CreateProcessW
WriteProcessMemory
ReleaseMutex
VirtualProtect
VirtualProtect
LoadLibraryExW
GetProcAddress
LoadLibraryA
VirtualProtect
GetProfileIntA
GetBinaryTypeW
LoadLibraryA
GetSystemTimeAsFileTime
WriteProcessMemory
ReadFile
CreateFileA
TerminateProcess
VirtualProtectEx
LoadLibraryExW
LoadLibraryExA
CreateFileA
VirtualProtect
VirtualProtect
GetStartupInfoW
LoadLibraryExA
GetStartupInfoW
WriteProcessMemory
LoadLibraryExW
ReadProcessMemory
GetStartupInfoA
GetStartupInfoA
Sections
.text Size: 4KB - Virtual size: 1024KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 8KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
oLF Size: 2KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
Mix Size: 2KB - Virtual size: 4KB
IMAGE_SCN_MEM_READ
.rsrc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_MEM_READ