Static task
static1
Behavioral task
behavioral1
Sample
9ca49272f6dfe6205b255cea58c5a1ddc74017fb4851739527db360d6fb88b3e.exe
Resource
win7-20220901-en
General
-
Target
9ca49272f6dfe6205b255cea58c5a1ddc74017fb4851739527db360d6fb88b3e
-
Size
200KB
-
MD5
6fd0c5e5ce3fe9db9e2d4802349a0df1
-
SHA1
d530a610472c475d61fc11ecbe521cd480304cfe
-
SHA256
9ca49272f6dfe6205b255cea58c5a1ddc74017fb4851739527db360d6fb88b3e
-
SHA512
e75825a13a119879fcafa79deaf950fdc2661dae3420f5864229f31daffb47a5db7936d8875dd3c46cf0f359bc3e9db355203bbb2e45579518905386bd4420eb
-
SSDEEP
3072:BDaMJMspnLM03aw7uKy0QGo1NwhYZ4z1sxtbjIUWnoRz/:BmMJ1a8yFGoTrZ4zytbLD
Malware Config
Signatures
Files
-
9ca49272f6dfe6205b255cea58c5a1ddc74017fb4851739527db360d6fb88b3e.exe windows x86
cfb8ad251fa98c8c891304e231aa1ebf
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetOEMCP
lstrcpyA
lstrcpyW
MultiByteToWideChar
FreeLibrary
GetProcAddress
GetLastError
LoadLibraryExA
SetErrorMode
LocalAlloc
lstrcatA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
RtlUnwind
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
WideCharToMultiByte
GetCPInfo
GetACP
lstrlenA
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
WriteFile
HeapFree
HeapAlloc
VirtualAlloc
LoadLibraryA
SetFilePointer
LCMapStringA
LCMapStringW
FlushFileBuffers
SetStdHandle
GetStringTypeA
GetStringTypeW
CloseHandle
user32
LoadStringA
wsprintfA
MessageBoxA
ole32
OleInitialize
OleUninitialize
Sections
.text Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 10KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.2data Size: 72KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE