Static task
static1
Behavioral task
behavioral1
Sample
a9ceb9cdee7edcbfaabd9f2395c98739b04f225e4b31c12824b5dbbf8ba91fd7.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a9ceb9cdee7edcbfaabd9f2395c98739b04f225e4b31c12824b5dbbf8ba91fd7.exe
Resource
win10v2004-20220812-en
General
-
Target
a9ceb9cdee7edcbfaabd9f2395c98739b04f225e4b31c12824b5dbbf8ba91fd7
-
Size
433KB
-
MD5
6a63d82bccda234205c8e8ee7032d080
-
SHA1
31668b5fcf1ccbc7d8fd8340470f0da8f6641257
-
SHA256
a9ceb9cdee7edcbfaabd9f2395c98739b04f225e4b31c12824b5dbbf8ba91fd7
-
SHA512
f65402250cc7b23cc28c147761ffe74fe85d31e5ed21542778a8a600fff0c28ae4565d0567214cc0927866a511c24001afeee9d2775c85e68fd07acc5ef7602a
-
SSDEEP
1536:a5fmrOSpRdLmxP3pDBjjPWclrLwkxmxQcS7UOcMkpiYhHUomt4kAuASk/:tr1l2pDZPWorskxmaXUO6PQt4kxASk
Malware Config
Signatures
Files
-
a9ceb9cdee7edcbfaabd9f2395c98739b04f225e4b31c12824b5dbbf8ba91fd7.exe windows x86
1932d2865521a5b60e7e2f53107a9daa
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CopyFileExW
GlobalSize
GetDiskFreeSpaceW
GetModuleHandleA
GetModuleFileNameA
FindNextVolumeW
OpenProcess
GetProcAddress
FindNextFileA
GetFileType
GetSystemWindowsDirectoryW
FreeLibraryAndExitThread
CloseHandle
GetSystemDirectoryW
MapViewOfFile
LoadModule
GetQueuedCompletionStatus
Process32First
FindCloseChangeNotification
LoadLibraryA
Process32Next
CreateDirectoryW
IsProcessorFeaturePresent
LoadResource
ExitProcess
FindFirstVolumeW
OutputDebugStringA
FindResourceExW
GetEnvironmentStrings
CreateFileA
CreateFiber
OpenMutexA
GetDateFormatW
GetVersion
CreateToolhelp32Snapshot
FindClose
GlobalGetAtomNameA
GetVersion
FileTimeToDosDateTime
user32
CreateWindowExA
DrawIconEx
RegisterClassExA
GetMessageA
DefWindowProcA
DefWindowProcA
AnimateWindow
DestroyMenu
DispatchMessageA
UpdateWindow
GetClipboardFormatNameA
DdeFreeStringHandle
TranslateMessage
ShowWindow
gdi32
DdEntry9
CreateBitmap
EnumEnhMetaFile
EnumFontFamiliesExA
RestoreDC
CreateBitmapIndirect
GetBoundsRect
SetPolyFillMode
EnumFontFamiliesW
GetEnhMetaFileW
GetTextExtentExPointW
GetObjectW
SetAbortProc
GetDeviceCaps
DdEntry49
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 324KB - Virtual size: 324KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 88KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 4KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE