Static task
static1
Behavioral task
behavioral1
Sample
9781aae344d7a12120ae6a6351b1bb7302be13436e387c027a56923ad49db9e5.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9781aae344d7a12120ae6a6351b1bb7302be13436e387c027a56923ad49db9e5.exe
Resource
win10v2004-20220812-en
General
-
Target
9781aae344d7a12120ae6a6351b1bb7302be13436e387c027a56923ad49db9e5
-
Size
300KB
-
MD5
71ea4ba7fa519605b46276d3683d8848
-
SHA1
a063aa6b7463d5ebb35d70c2ba7cbb7b32e69491
-
SHA256
9781aae344d7a12120ae6a6351b1bb7302be13436e387c027a56923ad49db9e5
-
SHA512
219f448484029cf1f7be51441b3d7122dee5014fe0c1288f5266ecbdf178c53aa1bcc5f9275363e4d5c8c8021439a68cc2a1f555bfb66aecb36dc4d01d219877
-
SSDEEP
6144:5WnOD68+hjLymdcOJsCM6xNcmIZtSQY9UL5BtY/vqSSW9h:IOD6XV+mqos/6n+Y9ULKVSq
Malware Config
Signatures
Files
-
9781aae344d7a12120ae6a6351b1bb7302be13436e387c027a56923ad49db9e5.exe windows x86
5ffa0e6d249888734485a7dc4f08f109
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetProcessHeap
GetStringTypeA
MapViewOfFile
GetExitCodeThread
TlsGetValue
FindClose
CreateDirectoryA
FindResourceA
ResetEvent
HeapSize
IsBadWritePtr
GetTickCount
SetLastError
IsValidCodePage
GetFileAttributesA
GetModuleHandleA
VirtualProtect
GetLocaleInfoA
GetFileAttributesA
GetDriveTypeW
RemoveDirectoryA
user32
wsprintfW
IsWindow
LoadCursorA
IsDialogMessageA
SetCursor
LoadImageW
GetCapture
PostMessageW
PeekMessageA
GetWindowLongW
GetWindowTextW
DispatchMessageA
SetFocus
msaatext
DllGetClassObject
DllUnregisterServer
DllUnregisterServer
DllCanUnloadNow
rasapi32
DwRasUninitialize
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 291KB - Virtual size: 290KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.import Size: 512B - Virtual size: 468B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE