Static task
static1
Behavioral task
behavioral1
Sample
9d25356b6020ad449e1ed1f6bb4640e445286353408bafb26ffedb2074fe6864.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9d25356b6020ad449e1ed1f6bb4640e445286353408bafb26ffedb2074fe6864.exe
Resource
win10v2004-20220812-en
General
-
Target
9d25356b6020ad449e1ed1f6bb4640e445286353408bafb26ffedb2074fe6864
-
Size
67KB
-
MD5
60764718c0bb99ec01906a9e21f90950
-
SHA1
5b0b4342e4d261bfd1985126af08039d40569efc
-
SHA256
9d25356b6020ad449e1ed1f6bb4640e445286353408bafb26ffedb2074fe6864
-
SHA512
35c65b3c6e959d3621fb9825ecc982935e6bafbafedb8637d3296588a7195cb7e1ecdf10763be2b977409c7fd0734b1988c15af05b8c73653de3ebb255d63cef
-
SSDEEP
1536:W9g7NUNDJf6ZUv77jpL5/aShTL88miqQS:WCZuttdtL6S
Malware Config
Signatures
Files
-
9d25356b6020ad449e1ed1f6bb4640e445286353408bafb26ffedb2074fe6864.exe windows x86
7a56608f59180c23f5f694c8feb2dd33
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetLastError
GetCurrentDirectoryA
GetFileAttributesA
WriteConsoleW
WriteConsoleW
GetStartupInfoA
IsBadCodePtr
SetEvent
IsValidLocale
ReleaseMutex
HeapCreate
GetPriorityClass
IsBadStringPtrA
GetModuleHandleA
DisconnectNamedPipe
lstrcpyW
CloseHandle
CopyFileW
WriteConsoleW
lstrlenW
CreatePipe
msftedit
RichComboBoxWndProc
RichListBoxWndProc
SetCustomTextOutHandlerEx
RichEditWndProc
shell32
SHGetDiskFreeSpaceA
ShellAboutA
ShellMessageBoxA
ShellMessageBoxA
DuplicateIcon
SHGetMalloc
DragAcceptFiles
ExtractIconA
SHGetMalloc
StrChrA
SHGetDiskFreeSpaceA
SHGetSettings
DragQueryFileA
msasn1
ASN1BERDecBool
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 592B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 57KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.orpc Size: 512B - Virtual size: 81B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ