Static task
static1
Behavioral task
behavioral1
Sample
9f2b1d18de48a2932cd6f28d55b2d5c1d464088284101fe093ea5a43074f25af.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9f2b1d18de48a2932cd6f28d55b2d5c1d464088284101fe093ea5a43074f25af.exe
Resource
win10v2004-20220812-en
General
-
Target
9f2b1d18de48a2932cd6f28d55b2d5c1d464088284101fe093ea5a43074f25af
-
Size
123KB
-
MD5
2df5630eb9572e784669e37dfc8ffe30
-
SHA1
20d68ed9cb4798d23acbd144c6bf181aa2bd44ec
-
SHA256
9f2b1d18de48a2932cd6f28d55b2d5c1d464088284101fe093ea5a43074f25af
-
SHA512
7d5bb89a1c819f9d54f47ef6e6700348229615e622120010d3743320a0bda2ade44b8ff6f05d3c836f7dd8c3c7b360f71bcf0f37c4b9d9ee60b46261cce9cb1e
-
SSDEEP
3072:vVONDQDf0DGcl31/JXN/4V+q6USaVeWOQFOR:tZs31ESURs
Malware Config
Signatures
Files
-
9f2b1d18de48a2932cd6f28d55b2d5c1d464088284101fe093ea5a43074f25af.exe windows x86
5706583acbd8684836c1349334d2407a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetFileAttributesA
Sleep
InterlockedIncrement
InterlockedDecrement
WaitForSingleObject
Sleep
Sleep
GetLongPathNameA
ExitProcess
LoadLibraryA
lstrcpyW
GetExitCodeProcess
GetPrivateProfileIntA
FindResourceW
GetPrivateProfileSectionA
GetPrivateProfileIntA
WriteFileEx
GetModuleHandleW
GetDiskFreeSpaceW
GetDiskFreeSpaceW
SetEnvironmentVariableA
lstrcmpA
VirtualAllocEx
apphelp
AllowPermLayer
SdbCreateMsiTransformFile
ApphelpCheckExe
ApphelpCheckIME
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dbg Size: 117KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ