Static task
static1
Behavioral task
behavioral1
Sample
c9e40cf057ab83a3409f7e16449443179e70e0be3cd1df04a5bba407adafb428.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c9e40cf057ab83a3409f7e16449443179e70e0be3cd1df04a5bba407adafb428.exe
Resource
win10v2004-20220812-en
General
-
Target
c9e40cf057ab83a3409f7e16449443179e70e0be3cd1df04a5bba407adafb428
-
Size
21KB
-
MD5
4b4e22ea93c703ab28071428fdf88430
-
SHA1
fa7155351c69dc7f7d2424f5e30b22295dd9d5bd
-
SHA256
c9e40cf057ab83a3409f7e16449443179e70e0be3cd1df04a5bba407adafb428
-
SHA512
8525759f321e258dd492d33a535abe366a3e1ecf7ca7365b29bb9aa3ce613042d690790256081851a755882179993aa2531356befc7558e20a0fe352625e0791
-
SSDEEP
192:zLffPBL51r5keVIW9rNgxkEtEcDQaS9poW12JxF6IC5IZcxrg1JDCN36+hrEZff6:zLf71r2eKQxDvcUaSXoWognmZc7eX
Malware Config
Signatures
Files
-
c9e40cf057ab83a3409f7e16449443179e70e0be3cd1df04a5bba407adafb428.exe windows x86
325960531b05edd04726947c439ea05d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetCurrentDirectoryA
DisconnectNamedPipe
HeapCreate
GetStdHandle
WriteConsoleW
SetEvent
GetFileAttributesA
CreatePipe
IsDebuggerPresent
lstrcpyW
WriteConsoleW
lstrlenW
CloseHandle
GetStartupInfoA
GetLastError
GetPriorityClass
ReleaseMutex
WriteConsoleW
ClearCommBreak
CopyFileW
GetModuleHandleA
msftedit
RichListBoxWndProc
SetCustomTextOutHandlerEx
RichComboBoxWndProc
RichEditWndProc
shell32
SHGetSettings
ExtractIconA
SHGetDiskFreeSpaceA
SHGetMalloc
DuplicateIcon
SHGetMalloc
ShellAboutA
ShellMessageBoxA
SHGetDiskFreeSpaceA
StrChrA
DragAcceptFiles
DragQueryFileA
ShellMessageBoxA
msasn1
ASN1BERDecBool
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 592B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.orpc Size: 512B - Virtual size: 115B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ