Static task
static1
Behavioral task
behavioral1
Sample
09ea3358af2ba00cf56c2a447c28c6c3e4e2272f90d60f157de8d561b2bfea1c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
09ea3358af2ba00cf56c2a447c28c6c3e4e2272f90d60f157de8d561b2bfea1c.exe
Resource
win10v2004-20220901-en
General
-
Target
09ea3358af2ba00cf56c2a447c28c6c3e4e2272f90d60f157de8d561b2bfea1c
-
Size
301KB
-
MD5
07fa362f723e284d62ef867ff5a1e330
-
SHA1
24a395ef6be244a46434e06ce9bc2adfa4458ce9
-
SHA256
09ea3358af2ba00cf56c2a447c28c6c3e4e2272f90d60f157de8d561b2bfea1c
-
SHA512
6429b81241bbc8345180f849016a5d1a5177746482f48d9201aa2e0b21d08d4d61a79ba52151df489b6075f08b1494aae597fe79473f1d22f244ed7eda684a9c
-
SSDEEP
6144:idsJn9EXn9rED7W2eCNjPNe21Y9NWa9PTiWoAjRb3a42lw4Ym19VcN:b9EXtED71XjP1G94imAVei4YoXcN
Malware Config
Signatures
Files
-
09ea3358af2ba00cf56c2a447c28c6c3e4e2272f90d60f157de8d561b2bfea1c.exe windows x86
f6495ba470b8a77785bc9431336de1b2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetDriveTypeW
SetLastError
GetCommandLineA
CreateMailslotA
IsBadWritePtr
GetModuleHandleA
ResetEvent
DeleteFileA
CancelIo
CreateDirectoryA
GetLocaleInfoA
MapViewOfFile
WriteFile
GetStdHandle
SetLocalTime
VirtualProtect
GetFileAttributesA
RemoveDirectoryA
GetProcessHeap
ReleaseMutex
HeapSize
user32
GetWindowTextW
DispatchMessageA
SetCursor
LoadImageA
wsprintfA
GetWindowLongW
PostMessageW
DestroyMenu
GetCaretPos
GetCapture
LoadCursorA
PeekMessageA
SetFocus
filemgmt
DllGetClassObject
DllRegisterServer
DllRegisterServer
DllUnregisterServer
rasapi32
DwRasUninitialize
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 293KB - Virtual size: 293KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.imp Size: 512B - Virtual size: 456B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ