Static task
static1
Behavioral task
behavioral1
Sample
9e5d4056d51b973c4221060469bd6cc967cab8bcdefc8a28fb25b3eaf4987ece.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9e5d4056d51b973c4221060469bd6cc967cab8bcdefc8a28fb25b3eaf4987ece.exe
Resource
win10v2004-20220812-en
General
-
Target
9e5d4056d51b973c4221060469bd6cc967cab8bcdefc8a28fb25b3eaf4987ece
-
Size
128KB
-
MD5
6cd1bd087b9874d98b4bac9b27151f60
-
SHA1
ce656cf275dfae89c4e1a4dc74244f95a688ef2f
-
SHA256
9e5d4056d51b973c4221060469bd6cc967cab8bcdefc8a28fb25b3eaf4987ece
-
SHA512
6014a35632e9933e1304456baa52750157a749c29284b030a91a39dd5c668c854a52b95d330c5180988b0aa879a5250d058982c0ce605dc8a10081a6dfd76568
-
SSDEEP
1536:RWG3p5+9nC0wB1mQ6MI5Zo69q2o1pEylAyYqTuNH9JH/1svCnwWKzOOabrE2:4wp5+9nCUZLqNrayYf1/1sqnwWiybrE
Malware Config
Signatures
Files
-
9e5d4056d51b973c4221060469bd6cc967cab8bcdefc8a28fb25b3eaf4987ece.exe windows x86
c31049881e1cea6f10c7274fb23c0991
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetLocaleInfoW
HeapFree
GetTickCount
GetFileAttributesA
CreateDirectoryW
IsValidCodePage
GetStringTypeA
LocalLock
TlsGetValue
GetFileAttributesA
SetPriorityClass
RemoveDirectoryW
FindResourceW
VirtualProtect
MapViewOfFile
SetLastError
SuspendThread
FindClose
GetModuleHandleA
GetExitCodeThread
GetCurrentProcess
user32
PeekMessageW
PostMessageW
GetWindowLongW
SetFocus
DispatchMessageA
SetCursor
wsprintfW
IsDialogMessageA
IsWindow
LoadStringW
LoadImageW
GetWindowTextW
LoadCursorA
msctf
DllUnregisterServer
DllCanUnloadNow
TF_InitSystem
DllUnregisterServer
rasapi32
DwRasUninitialize
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 117KB - Virtual size: 117KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.import Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE