?F342n@@YGXPAX@Z
Static task
static1
Behavioral task
behavioral1
Sample
9b1846763f76af790d5fd2772a411ae58837512236f7e7a9dc279d821a738327.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9b1846763f76af790d5fd2772a411ae58837512236f7e7a9dc279d821a738327.exe
Resource
win10v2004-20220812-en
General
-
Target
9b1846763f76af790d5fd2772a411ae58837512236f7e7a9dc279d821a738327
-
Size
27KB
-
MD5
41cea1567cad8ec2a01109df0e156f16
-
SHA1
6e28ce58994b967315525a30bbe052b5f0812e85
-
SHA256
9b1846763f76af790d5fd2772a411ae58837512236f7e7a9dc279d821a738327
-
SHA512
c241d4e0f9325f2503ff84851f39fc91464f43ffd6e171afec5b7274327cd7652a5181ef5465ba3b6af92a9ea40911a7b52502969c482813e6bcb33481b9269a
-
SSDEEP
384:xp7ot4NBy+oUcmusFhoMRJ/QEcxDmkhK5ZqgnP4lmW+fjJvj8:xp7Egy+or6hoM5eqfjV8
Malware Config
Signatures
Files
-
9b1846763f76af790d5fd2772a411ae58837512236f7e7a9dc279d821a738327.exe windows x86
61e5f10389038a19fded01be1b489335
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
OpenSemaphoreA
CreateHardLinkA
GetProcAddress
GetModuleHandleA
GetFileInformationByHandle
AreFileApisANSI
cryptdll
MD5Init
Exports
Exports
Sections
3 Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.23_0 Size: 1024B - Virtual size: 558B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 564B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.RSRc Size: 1.8MB - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.r123c Size: 512B - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ