Static task
static1
Behavioral task
behavioral1
Sample
9e1756aee8c367b9294240c2b7d21497c9e941b9faf1836046884a7f251bc59e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9e1756aee8c367b9294240c2b7d21497c9e941b9faf1836046884a7f251bc59e.exe
Resource
win10v2004-20220812-en
General
-
Target
9e1756aee8c367b9294240c2b7d21497c9e941b9faf1836046884a7f251bc59e
-
Size
35KB
-
MD5
0d7db8101210dab8a32771e01444b032
-
SHA1
6dd056558c994d1713dc0003042948e8c6e13763
-
SHA256
9e1756aee8c367b9294240c2b7d21497c9e941b9faf1836046884a7f251bc59e
-
SHA512
aac680aff7a2de4a87da37dd864a67c008716dc087ac549ded7837cda4032c01abe44c56932f62f6913c92cd312c98158970e7a3a2427ebbb9e4435c1cbb6d5f
-
SSDEEP
384:l61mhT54/Zp/EnaF4se8oE/vQ9pR2BqVuq5f8Jp5LbhD5bgTsBqiBuf/kg:l61md52t4sHSpR2AEqeHxBgYJS
Malware Config
Signatures
Files
-
9e1756aee8c367b9294240c2b7d21497c9e941b9faf1836046884a7f251bc59e.exe windows x86
6e2f1af126100022290c4fe24997fcf0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
TranslateMessage
DispatchMessageW
LoadIconW
LoadCursorW
RegisterClassExW
BeginPaint
GetClientRect
LoadStringW
PostQuitMessage
DestroyWindow
EndPaint
DefWindowProcW
PostMessageW
DialogBoxParamW
EndDialog
SendMessageW
CreateWindowExW
DrawTextW
GetMessageW
ShowWindow
LoadBitmapW
UpdateWindow
kernel32
ExitProcess
GetStartupInfoA
GetCommandLineW
GetLastError
lstrlenW
GetModuleHandleW
GetModuleHandleA
GetCommandLineA
gdi32
SetTextAlign
DeleteObject
GetStockObject
GetBkColor
CreateSolidBrush
TextOutA
SetBkColor
comctl32
InitCommonControlsEx
shell32
CommandLineToArgvW
Sections
.text Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 462B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ