Static task
static1
Behavioral task
behavioral1
Sample
9d39be0cf91bf5893f7810be5c59bbc675cb100a859c3cc00a1e717590ff4104.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9d39be0cf91bf5893f7810be5c59bbc675cb100a859c3cc00a1e717590ff4104.exe
Resource
win10v2004-20220901-en
General
-
Target
9d39be0cf91bf5893f7810be5c59bbc675cb100a859c3cc00a1e717590ff4104
-
Size
189KB
-
MD5
87bb242f533608dd83a64fb505ab70d6
-
SHA1
8b40c16c7549118bf84821bfe1380fccf78243c2
-
SHA256
9d39be0cf91bf5893f7810be5c59bbc675cb100a859c3cc00a1e717590ff4104
-
SHA512
edf697729ee3586ba904f4ef97036e03e6c3fa0e9755959512f1a1cc846c184b8f0e173d67698edfdba4649db6737db719bfca1a110cac3d737fe0811d80c1ce
-
SSDEEP
1536:ygydNATbA7nEYvJnXm3DYDCXx4Bp8mSLgydNATbA7nEYvJnXm3DYDCXx4Bp8mS:PuQs7EYh2sDG1EuQs7EYh2sDG1
Malware Config
Signatures
Files
-
9d39be0cf91bf5893f7810be5c59bbc675cb100a859c3cc00a1e717590ff4104.exe windows x86
fc17315f814c78526a9e3564b0403e64
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStdHandle
ExitThread
WriteFile
GetLocalTime
OpenFile
OpenFileMappingA
GetLastError
DeleteFileA
GetFileType
DeleteAtom
GlobalFree
GetCommandLineA
FindAtomA
FreeResource
ReadFile
FindAtomW
GetPriorityClass
CopyFileExA
AddAtomW
FlushFileBuffers
DeleteFileW
GetCPInfo
CreateDirectoryA
FindClose
ExitProcess
GetLocalTime
GetLastError
DeleteFileA
GlobalFree
OpenFileMappingA
FindAtomA
DeleteAtom
WriteFile
DeleteFileW
CopyFileExA
AddAtomW
FindAtomW
FatalExit
CopyFileA
GetCommandLineA
GetPriorityClass
Sections
.rdata Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.DATA Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 45KB - Virtual size: 400KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.init Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 839B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ