Static task
static1
Behavioral task
behavioral1
Sample
0a9796c2772712b82afbf80a57fc3d442094d39c386b467e2009b7059a0815fc.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0a9796c2772712b82afbf80a57fc3d442094d39c386b467e2009b7059a0815fc.exe
Resource
win10v2004-20220812-en
General
-
Target
0a9796c2772712b82afbf80a57fc3d442094d39c386b467e2009b7059a0815fc
-
Size
870KB
-
MD5
81a0948b02c96af158f436f990962680
-
SHA1
3c69d2e1d21a964421d08aa05662a38f979be77a
-
SHA256
0a9796c2772712b82afbf80a57fc3d442094d39c386b467e2009b7059a0815fc
-
SHA512
4c7eb6cadff322329e80dbfb7dcf731068e0ece0c3e4fb19ff1f961d7be3b4c9fd91e5a97fa21d6f757336f8b2c7651de6dc06366f81f6058d5a2c8f24f87a8c
-
SSDEEP
24576:4kgC0NFwGLjJmHUKXwukgICCylFW44ZtM3F:4/C0NFxJKwMfImF
Malware Config
Signatures
Files
-
0a9796c2772712b82afbf80a57fc3d442094d39c386b467e2009b7059a0815fc.exe windows x86
afbe18644172460bf9697d4c29da9d78
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapDestroy
Sleep
GetModuleFileNameA
TlsGetValue
CreateFileA
HeapCreate
GetACP
GetStartupInfoA
CloseHandle
GetCommandLineW
lstrlenA
TlsAlloc
CreateFileMappingA
GetEnvironmentVariableA
GetStdHandle
IsBadCodePtr
GetFileAttributesW
SetEvent
SetLastError
GetModuleHandleA
user32
DestroyMenu
GetClassInfoA
FindWindowA
CreateIcon
PeekMessageA
IsZoomed
GetSysColor
DrawTextW
GetWindowLongA
DispatchMessageA
IsWindow
DispatchMessageA
CallWindowProcW
stclient
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
DllCanUnloadNow
timedate.cpl
CPlApplet
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 862KB - Virtual size: 861KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ