Static task
static1
Behavioral task
behavioral1
Sample
b9e1d4aed1a2cf2d155033adbddcb3e561d34537fa89fcfb75176ac6f076dc09.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b9e1d4aed1a2cf2d155033adbddcb3e561d34537fa89fcfb75176ac6f076dc09.exe
Resource
win10v2004-20220901-en
General
-
Target
b9e1d4aed1a2cf2d155033adbddcb3e561d34537fa89fcfb75176ac6f076dc09
-
Size
306KB
-
MD5
1f5ddffa6ec816e37dd3a6a3028879e0
-
SHA1
7916d808bb7349e8195d089325225e558931798a
-
SHA256
b9e1d4aed1a2cf2d155033adbddcb3e561d34537fa89fcfb75176ac6f076dc09
-
SHA512
4db79475c6f4fbe4aaaa09358f19b259c1ea37b34069fd776a38e53006c7d163ef7b2657d7eeff8e79ef4d934fdd040915cd95ce3278d8aa4566da653232b85f
-
SSDEEP
6144:rRqZqQvZWUrZX97IxJ177vbOW2Ro16S8YzTYG5NM6nDkU5hBMNw:rRqZxDr2D77Uy62zTYGXMKDkQMq
Malware Config
Signatures
Files
-
b9e1d4aed1a2cf2d155033adbddcb3e561d34537fa89fcfb75176ac6f076dc09.exe windows x86
8850f074f3b8c6f593324a5e98131cd8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetFileAttributesW
CloseHandle
GetDiskFreeSpaceW
FindNextVolumeA
GetModuleHandleA
lstrcmpiW
GetCurrentDirectoryA
OpenMutexW
GetModuleHandleW
GetVolumePathNameA
CloseHandle
WaitForMultipleObjects
GetEnvironmentVariableA
CloseHandle
ReleaseSemaphore
GetFullPathNameA
lstrcmpW
GetFullPathNameA
GetConsoleMode
HeapCreate
CreateEventW
FindFirstVolumeA
GetConsoleTitleA
certmgr
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Sections
.text Size: 5KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_WRITE
.pack Size: 297KB - Virtual size: 297KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE