Static task
static1
Behavioral task
behavioral1
Sample
9431aded9b2fb98d501897587c5c7eb1916c6d84431b7709a020b11ad7467ed3.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9431aded9b2fb98d501897587c5c7eb1916c6d84431b7709a020b11ad7467ed3.exe
Resource
win10v2004-20220812-en
General
-
Target
9431aded9b2fb98d501897587c5c7eb1916c6d84431b7709a020b11ad7467ed3
-
Size
42KB
-
MD5
64281309703527daeef96acc22dd320a
-
SHA1
0b0f34a6b1860a05b7fe6c3ef15edbca851f0747
-
SHA256
9431aded9b2fb98d501897587c5c7eb1916c6d84431b7709a020b11ad7467ed3
-
SHA512
0d0a433a8ddbcc1e12db98c20cb1dc11b0f720c2442fb85cb7a9856e2f3f28521d9a2175d4e5424282d266fd00b402f8fc3856aaf9826cf76239bbb4132cc42f
-
SSDEEP
768:Av6zjw/6iMaYbmGU2mw/PcZZSeK80/8YX8Vopcol:c6zjwSmGJn/PcZLKSVopc
Malware Config
Signatures
Files
-
9431aded9b2fb98d501897587c5c7eb1916c6d84431b7709a020b11ad7467ed3.exe windows x86
0a986e9afdbd495e0e38f24ac2fdf103
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcatA
SetEvent
ResetEvent
FindClose
FindFirstFileW
lstrlenA
WaitForMultipleObjects
Process32NextW
CloseHandle
InterlockedDecrement
InterlockedIncrement
DebugBreak
OutputDebugStringA
Sleep
ExitProcess
GetCurrentThreadId
InitializeCriticalSection
GetFileSize
CreateFileW
GetModuleHandleA
GetStartupInfoA
user32
DialogBoxParamA
GetSystemMetrics
LoadImageA
SendMessageA
ShowWindow
UpdateWindow
EndDialog
LoadStringA
CharNextA
wvsprintfA
FindWindowA
PostMessageA
shfolder
SHGetFolderPathW
wininet
InternetOpenW
InternetCloseHandle
msvcrt
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
__set_app_type
_XcptFilter
_exit
_onexit
__dllonexit
_wfopen
exit
_mbsstr
memmove
_ismbcdigit
_controlfp
calloc
free
memset
fclose
fread
strncpy
wcslen
strlen
sprintf
atoi
__CxxFrameHandler
_EH_prolog
wcscat
wcscpy
wcscmp
strstr
_beginthreadex
memcpy
??2@YAPAXI@Z
_except_handler3
Sections
.text Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ