Static task
static1
Behavioral task
behavioral1
Sample
c9e8432363a8b3bd56bf6cd99e47c8cb4c3053d7c35b439194a3f37ffab8c32b.exe
Resource
win7-20220414-en
General
-
Target
c9e8432363a8b3bd56bf6cd99e47c8cb4c3053d7c35b439194a3f37ffab8c32b
-
Size
2.2MB
-
MD5
001ad1930c324d2a2ad00e975838690b
-
SHA1
e17c59803f5ec3c8452d6bf75a148cd5a46c2a29
-
SHA256
c9e8432363a8b3bd56bf6cd99e47c8cb4c3053d7c35b439194a3f37ffab8c32b
-
SHA512
34ac21e9b6758bf5337ca453e02b1a4eb8001982e78f5a88d0a0d292af9432c452c199b1a7b6de25a575da05a28bdcceb93492116f2c1c934b05d0f5e60f70cb
-
SSDEEP
49152:ISvh37g9l7dQV07PXaL5G52WY6GwTgpVI+qAuVr/U2w:ISvt72XQV07fak5ky0Y/y
Malware Config
Signatures
Files
-
c9e8432363a8b3bd56bf6cd99e47c8cb4c3053d7c35b439194a3f37ffab8c32b.exe windows x64
dd013e6bee2825bc1dc1bb5ec1602c4f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
CloseHandle
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
user32
MessageBoxW
gdi32
CreateCompatibleDC
advapi32
GetUserNameW
shell32
SHFileOperationW
gdiplus
GdipGetImageEncodersSize
crypt32
CryptUnprotectData
urlmon
URLDownloadToFileW
wininet
HttpOpenRequestW
Sections
.text Size: - Virtual size: 652KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 162KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.gfids Size: - Virtual size: 456B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 512B - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rfcde0 Size: - Virtual size: 1.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rfcde1 Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 36B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 25KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ