Static task
static1
Behavioral task
behavioral1
Sample
9c830e2d84105de3099d04e42173035d3357d1942afd9cf82b590e3a4c9ae484.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9c830e2d84105de3099d04e42173035d3357d1942afd9cf82b590e3a4c9ae484.exe
Resource
win10v2004-20220812-en
General
-
Target
9c830e2d84105de3099d04e42173035d3357d1942afd9cf82b590e3a4c9ae484
-
Size
26KB
-
MD5
a15f9f44e6e534f7b7262354307c8110
-
SHA1
7a5518cd7b925bbd2cb901aa3014d084ca5666ba
-
SHA256
9c830e2d84105de3099d04e42173035d3357d1942afd9cf82b590e3a4c9ae484
-
SHA512
ae1c23526716f3249c201a3103398cda7ee865b7e346bd20f58be2eed63760d770290e988341b1b47e2ad2c03074bcca64c0f5b7cf20a44765ef2649e5e976e2
-
SSDEEP
384:2aXFVAwFKHGJnBFEBB2EmmAC3HUGE8r+x34kEmGR9J5rpLpnE0IWP+CBswh7ErWQ:2aw9w+2CAWHpuod1Jxpnmxwh7G5Of
Malware Config
Signatures
Files
-
9c830e2d84105de3099d04e42173035d3357d1942afd9cf82b590e3a4c9ae484.exe windows x86
c0e62a4e3777f28187563a01116a7a79
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
RtlZeroMemory
CreateThread
GetStartupInfoW
GetModuleHandleW
LoadLibraryA
GetProcAddress
ExitProcess
WaitForSingleObject
lstrcpyA
ntdll
memset
_wcsnicmp
msvcrt
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
__setusermatherr
_initterm
__wgetmainargs
_wcmdln
_XcptFilter
_exit
exit
user32
TranslateMessage
GetMessageA
DispatchMessageW
comdlg32
GetOpenFileNameW
advapi32
GetUserNameW
shell32
ShellAboutW
ole32
CoInitialize
comctl32
ord17
powrprof
IsPwrShutdownAllowed
GetPwrCapabilities
clusapi
ClusterEnum
Sections
.text Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE