Static task
static1
Behavioral task
behavioral1
Sample
509e9e2c7a384ee99339a48938625b31dbccd896f9febcf816e13ca326acccdd.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
509e9e2c7a384ee99339a48938625b31dbccd896f9febcf816e13ca326acccdd.exe
Resource
win10v2004-20220812-en
General
-
Target
509e9e2c7a384ee99339a48938625b31dbccd896f9febcf816e13ca326acccdd
-
Size
640KB
-
MD5
50b7c8851740634ee6c1ce895b33fe50
-
SHA1
c9b864e10e202048d239bf0ba4c357ccaa8c9c9b
-
SHA256
509e9e2c7a384ee99339a48938625b31dbccd896f9febcf816e13ca326acccdd
-
SHA512
818ecb856166833c0360718f44a27e8429c1d718f5adb31720e518e26eb24a50e318d2bd1da7d8faeb577c32708d567c7128ad3ac6f5ac6a787ff87d8b8146d0
-
SSDEEP
12288:Ua7xIT+hlogyTfWFu4TBcDv8eE/glCHepfh1SGkWEtFSofXDX:iT+b1FzBxXgwH+fjkWEtIo7
Malware Config
Signatures
Files
-
509e9e2c7a384ee99339a48938625b31dbccd896f9febcf816e13ca326acccdd.exe windows x86
b95b0a73368eaf2541275c672059b9c7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
SetFileSecurityA
kernel32
EnumDateFormatsExA
user32
GetInputState
MapVirtualKeyExW
GetProcessWindowStation
ntdll
CsrCaptureMessageMultiUnicodeStringsInPlace
Sections
.text Size: 633KB - Virtual size: 636KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 256B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE