Static task
static1
Behavioral task
behavioral1
Sample
9cd13a2ecff4df9e6f1638cd09a2eb24c15463b16c487bd03aaee7507af0b1ec.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
9cd13a2ecff4df9e6f1638cd09a2eb24c15463b16c487bd03aaee7507af0b1ec.exe
Resource
win10v2004-20220812-en
General
-
Target
9cd13a2ecff4df9e6f1638cd09a2eb24c15463b16c487bd03aaee7507af0b1ec
-
Size
228KB
-
MD5
5daa3d63cb7e2991163aad0c112a0a90
-
SHA1
616d1ad162ccdf9725d4d09bfc830bfeec681e93
-
SHA256
9cd13a2ecff4df9e6f1638cd09a2eb24c15463b16c487bd03aaee7507af0b1ec
-
SHA512
6cf4a20f75bc648508adeced99a3021bc74c32cf1823b7a7ce58edaf8420d52753139f123a50eab0117442034b434af4a9c9110ae98c6868ab1f6b45be90dd5d
-
SSDEEP
6144:i40U6DXTzjdPX4+8sbbhHiFGt7vGqlam:i40U67j2+8sJVyea
Malware Config
Signatures
Files
-
9cd13a2ecff4df9e6f1638cd09a2eb24c15463b16c487bd03aaee7507af0b1ec.exe windows x86
77d0e16529b2ab982d30b9ea8e135ab3
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WriteFileEx
GetFileSize
WaitForSingleObject
GetVersion
GetSystemTimeAsFileTime
GetDiskFreeSpaceExW
EnumResourceNamesW
Sleep
LocalAlloc
UnlockFileEx
GetModuleHandleW
CreateFileW
GetPriorityClass
SystemTimeToFileTime
VirtualAlloc
SwitchToThread
GetProfileStringW
VirtualQuery
GetCurrentThreadId
RaiseException
GetProcAddress
LoadLibraryA
DeviceIoControl
CreateDirectoryW
SetErrorMode
GetComputerNameW
SleepEx
FreeLibraryAndExitThread
WriteProfileStringW
GlobalAlloc
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
ExitProcess
GetCPInfo
HeapFree
HeapAlloc
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
WriteFile
GetStringTypeA
GetStringTypeW
MultiByteToWideChar
HeapReAlloc
GetACP
GetOEMCP
LCMapStringA
LCMapStringW
Sections
.text Size: 217KB - Virtual size: 216KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ