Static task
static1
Behavioral task
behavioral1
Sample
1f9e98399098b9b006d10d2676ed50eee5c831bf8d5888c21c9350dab531a08a.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
1f9e98399098b9b006d10d2676ed50eee5c831bf8d5888c21c9350dab531a08a.exe
Resource
win10v2004-20220812-en
General
-
Target
1f9e98399098b9b006d10d2676ed50eee5c831bf8d5888c21c9350dab531a08a
-
Size
13KB
-
MD5
660d6a600a0f7b2a6f3cf9817cbdaadf
-
SHA1
4a59d50df60e4fc17000dc7f79e8696cfaf7cab9
-
SHA256
1f9e98399098b9b006d10d2676ed50eee5c831bf8d5888c21c9350dab531a08a
-
SHA512
a48eef88026b2a77439aad48c7f60eca7cb0568f1edb2f931d6e9def254eb818c30912726ac04ac28538cf3e30e6e7ad729eef3c225787c3f2711ea8fb691de4
-
SSDEEP
384:pEVSvr8z8vcXPSTCPMRKNkTOwDp7pprQt:l8zsTDr9ny
Malware Config
Signatures
Files
-
1f9e98399098b9b006d10d2676ed50eee5c831bf8d5888c21c9350dab531a08a.exe windows x86
a9244f6974a26f4005f371e987a5088f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
CreateFileA
CreateMutexA
CreateProcessA
DeleteFileA
ExitProcess
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetProcAddress
GetTempFileNameA
GetTempPathA
GetThreadContext
GetTickCount
LoadLibraryA
OpenProcess
ReleaseMutex
ResumeThread
RtlMoveMemory
RtlZeroMemory
SetFilePointer
SetThreadContext
Sleep
TerminateProcess
VirtualAllocEx
WaitForSingleObject
WinExec
WriteFile
WriteProcessMemory
lstrlenA
Sections
.text Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 796B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 112B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE