Static task
static1
Behavioral task
behavioral1
Sample
b9de3377990b112d9207e6957a52ddf7c0a230139c0b7943ee5a283f9c8f8b50.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
b9de3377990b112d9207e6957a52ddf7c0a230139c0b7943ee5a283f9c8f8b50.exe
Resource
win10v2004-20220812-en
General
-
Target
b9de3377990b112d9207e6957a52ddf7c0a230139c0b7943ee5a283f9c8f8b50
-
Size
102KB
-
MD5
405923330bb41e8826464bdca2754808
-
SHA1
108fd6d3229517211e0bc4079cf2c81df39b11eb
-
SHA256
b9de3377990b112d9207e6957a52ddf7c0a230139c0b7943ee5a283f9c8f8b50
-
SHA512
523c08d63e36cf98f10b5c894cfc9ab4482eb959f0aab2a056e066956b84c3b7569d78782a5c936f8169bb53acb518c6b01a559149c03198f04410656509222a
-
SSDEEP
768:YFrHjr9HkRZIkqdAd5Jrfi7z4KbcHTx7mIFpagsJE20xoqN8C1tPw8dQZOkP8o+e:2xOryIFpagsq20xLNHdDS1POSFS
Malware Config
Signatures
Files
-
b9de3377990b112d9207e6957a52ddf7c0a230139c0b7943ee5a283f9c8f8b50.exe windows x86
5e20efa944886fb1fa769415f2f56081
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegCreateKeyW
RegDeleteValueW
RegDeleteKeyW
RegEnumKeyExW
kernel32
lstrcatA
GetStdHandle
OpenFile
lstrlenA
FindClose
CompareStringA
FormatMessageA
OpenFileMappingA
GetLocalTime
WriteFile
GetCommandLineA
CreateDirectoryA
HeapFree
ExitThread
lstrcmpA
ReadFile
DeleteFileW
GetPriorityClass
user32
DrawIconEx
GetMenu
CreateIcon
AlignRects
GetFocus
Sections
.8274f Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bf7a Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.2gdd Size: 53KB - Virtual size: 372KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.8f78 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.56d60 Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ