Static task
static1
Behavioral task
behavioral1
Sample
9623f49e05ed05f8a743b632f6207a0f05cdb6016e2eb21a8af55fcb46b9f084.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9623f49e05ed05f8a743b632f6207a0f05cdb6016e2eb21a8af55fcb46b9f084.exe
Resource
win10v2004-20220812-en
General
-
Target
9623f49e05ed05f8a743b632f6207a0f05cdb6016e2eb21a8af55fcb46b9f084
-
Size
33KB
-
MD5
69fed8a3b337a7533295443fd3aea2d0
-
SHA1
ee4b6d19c2ac98e6076d6e3e0a2396ee4bf2e582
-
SHA256
9623f49e05ed05f8a743b632f6207a0f05cdb6016e2eb21a8af55fcb46b9f084
-
SHA512
73c2e666cbc084468de03a66457b1a86ee48a8263ef66770f375a6162b0807f0197fab133c340aff49e0c7efe4e4f67d338076ddc23e565779309a19c8042c40
-
SSDEEP
384:8y7yVyktGsD0LrC55R6mBvFU/51qHZCM9u:sVJ1R6I9U/510ZN9u
Malware Config
Signatures
Files
-
9623f49e05ed05f8a743b632f6207a0f05cdb6016e2eb21a8af55fcb46b9f084.exe windows x86
61bd09e6ca455693fcc8b30dc94ca0a0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
FindClose
GetCurrentProcess
GetModuleHandleA
VirtualProtectEx
HeapFree
GetFileAttributesW
CreateDirectoryW
GetFileAttributesW
GetVersionExA
GlobalLock
LocalFlags
GetExitCodeThread
GetStringTypeA
GetCurrentThread
CreateEventA
RemoveDirectoryW
IsValidCodePage
SetLastError
GetPrivateProfileSectionA
GetLocaleInfoW
TlsGetValue
user32
SetCursor
DispatchMessageA
GetWindowTextW
GetWindowLongW
SetCursorPos
IsDialogMessageA
wsprintfW
DefDlgProcA
IsWindow
LoadCursorA
PostMessageW
PeekMessageW
SetFocus
msdtcprx
DTC_XaOpen
DTC_XaStart
DTC_XaEnd
DTC_XaCommit
uxtheme
CloseThemeData
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.import Size: 512B - Virtual size: 484B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE