Static task
static1
Behavioral task
behavioral1
Sample
9e06e064c14474362f94838798e3036a173622d8fbcc3ef2898ea7071314306d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9e06e064c14474362f94838798e3036a173622d8fbcc3ef2898ea7071314306d.exe
Resource
win10v2004-20220812-en
General
-
Target
9e06e064c14474362f94838798e3036a173622d8fbcc3ef2898ea7071314306d
-
Size
812KB
-
MD5
175af213424aadee2b0853fe4f8730d0
-
SHA1
0aad7b1fbb477c5f435c8ca1c32a7cab91e137e2
-
SHA256
9e06e064c14474362f94838798e3036a173622d8fbcc3ef2898ea7071314306d
-
SHA512
d5e26eadd0e69f007c998c32625855ba450dc312931e971207a783bb338e76fa2389511c95dfd8a41c0e0d1386c6baa8ed78131e2e83e4e23e2fd532eee196f7
-
SSDEEP
24576:rwSPbiY6WsDkick86kAWk2QJtaHumkumYT:/eWsDqkea/JtkjT
Malware Config
Signatures
Files
-
9e06e064c14474362f94838798e3036a173622d8fbcc3ef2898ea7071314306d.exe windows x86
4a349a2b9963bf1d1a7fb05fbfe7e400
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
SetEndOfFile
SetEndOfFile
lstrcpyW
VirtualProtectEx
SetEndOfFile
OpenMutexW
GetStringTypeW
GetLogicalDriveStringsW
SetEndOfFile
GetVersion
SetCurrentDirectoryW
LoadLibraryA
GetFileAttributesA
SetEndOfFile
GetStdHandle
CreateEventA
winhttp
DllGetClassObject
WinHttpOpen
DllCanUnloadNow
WinHttpConnect
Sections
.text Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_WRITE
.data Size: 802KB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE