Static task
static1
Behavioral task
behavioral1
Sample
9ea594f5ffe10c9e4c8056f863a70caf9409166b.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
9ea594f5ffe10c9e4c8056f863a70caf9409166b.exe
Resource
win10v2004-20221111-en
General
-
Target
9ea594f5ffe10c9e4c8056f863a70caf9409166b
-
Size
361KB
-
MD5
67022504f9bb360704bd9af03d02b93f
-
SHA1
9ea594f5ffe10c9e4c8056f863a70caf9409166b
-
SHA256
e4cd690d197d3d6a6eeac8d711b0c7c3997e6c41146a9e64f095a6da66ee6176
-
SHA512
53a4deccb6f9031924fad10e42fd3c83d7dd449ace46027b72c0dcfd95513924f92dbd6f31e03c9ffc6e19e62b4871fd0dc45139cd281e5c8faeff7ee304694d
-
SSDEEP
6144:ZYCUIr+OXOBaU7iGYiJkaV2OFbC4XEqPTY/U1GvbYG+XtLETkzmo:ZYCUZxgU7iGYiJkaC2fPTY/U8vbYj54O
Malware Config
Signatures
Files
-
9ea594f5ffe10c9e4c8056f863a70caf9409166b.exe windows x86
d8fbbfd561b090d32ca6a057677993eb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ReleaseMutex
OpenMutexA
SetEvent
CreateMutexA
SearchPathA
CloseHandle
GetCommandLineA
FreeConsole
VirtualProtect
SetLastError
GetModuleHandleA
FindClose
Sleep
DeleteCriticalSection
GetVersionExW
GetTickCount
FindResourceExA
CreateThread
GetLastError
TlsGetValue
advapi32
LsaFreeMemory
FreeSid
LsaClose
OpenEventLogA
RegCloseKey
LsaSetSecret
IsValidSid
RegEnumKeyExA
RegLoadKeyA
GetFileSecurityA
CloseTrace
EqualSid
RegCreateKeyExA
CloseEventLog
RegCloseKey
loghours
DirSyncScheduleDialog
DialinHoursDialogEx
DialinHoursDialog
LogonScheduleDialog
DirSyncScheduleDialogEx
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ