Static task
static1
Behavioral task
behavioral1
Sample
9818b788ac05413c178643efb710dca207ca4a693f38caf350a20d48eb9d163b.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9818b788ac05413c178643efb710dca207ca4a693f38caf350a20d48eb9d163b.exe
Resource
win10v2004-20220812-en
General
-
Target
9818b788ac05413c178643efb710dca207ca4a693f38caf350a20d48eb9d163b
-
Size
81KB
-
MD5
746099a6a8e4ffcf5bacfa88aef196cf
-
SHA1
5df25c286a015e3eeec58e89176f2e9634f0b25e
-
SHA256
9818b788ac05413c178643efb710dca207ca4a693f38caf350a20d48eb9d163b
-
SHA512
18abc6e74ca970137478276e060945b0779a87ada8f71881be22cdc9d418da3c83e85b97663d305bb624a72c591efa47de442ac313e17c569c246247aef1426b
-
SSDEEP
1536:CsxOxsoGxGLfPIcmOf1Kn9MJOOrVh9DxyqkH6GchPKh:C5BGyfPBmON+GsoVDYmh
Malware Config
Signatures
Files
-
9818b788ac05413c178643efb710dca207ca4a693f38caf350a20d48eb9d163b.exe windows x86
3bbedb8dbb33c125cd361f34aac99fc7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetStringTypeA
HeapSize
VirtualProtect
GetDriveTypeW
FindResourceA
ResetEvent
GetExitCodeThread
GetModuleHandleA
GetFileAttributesA
GetProcessHeap
GetLocaleInfoA
FindClose
CreateDirectoryA
SetLastError
TlsGetValue
RemoveDirectoryA
GetFileAttributesA
IsValidCodePage
IsBadWritePtr
GetTickCount
MapViewOfFile
user32
LoadCursorA
GetWindowLongW
SetCursor
GetCapture
DispatchMessageA
PeekMessageA
wsprintfW
IsWindow
GetWindowTextW
PostMessageW
LoadImageW
SetFocus
IsDialogMessageA
msaatext
DllGetClassObject
DllUnregisterServer
DllUnregisterServer
DllCanUnloadNow
rasapi32
DwRasUninitialize
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 72KB - Virtual size: 71KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.import Size: 512B - Virtual size: 468B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE