Static task
static1
Behavioral task
behavioral1
Sample
f9e8d814320add565e393ef8e357917c3d4071a2b93790ea955e1a4d4399c711.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f9e8d814320add565e393ef8e357917c3d4071a2b93790ea955e1a4d4399c711.exe
Resource
win10v2004-20220812-en
General
-
Target
f9e8d814320add565e393ef8e357917c3d4071a2b93790ea955e1a4d4399c711
-
Size
19KB
-
MD5
813a0694416592ce06fd91ae11812610
-
SHA1
1bbd7034332c251ab730048928fcca699bf9e151
-
SHA256
f9e8d814320add565e393ef8e357917c3d4071a2b93790ea955e1a4d4399c711
-
SHA512
dc882ebb212e0826f1d1603e760830b27177908e482498d77d217522d16444855107246a616e4a64295bd1681a24487f02d280ff735a840d882f7dcee2b83649
-
SSDEEP
384:VnXH8vJ7xcQNXJYh0FA4jahs3KuYXB4c0YINbul0fG34o:RMvJ7xcQN2eFavXB4c0XNql0
Malware Config
Signatures
Files
-
f9e8d814320add565e393ef8e357917c3d4071a2b93790ea955e1a4d4399c711.exe windows x86
446aaf256bf2e5e84098b79a711ff297
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
CreateEventA
GetFileAttributesA
lstrcatA
GetProcAddress
WaitForSingleObject
GetModuleFileNameA
GetModuleHandleA
CloseHandle
GetTempPathA
lstrcpyA
lstrlenA
SetFilePointer
LoadLibraryA
CreateFileA
SetEvent
WriteFile
ExitThread
GetVersionExA
CreateThread
ExitProcess
RtlUnwind
user32
PeekMessageA
CreateWindowExA
TranslateMessage
ShowWindow
MsgWaitForMultipleObjects
DestroyWindow
CharToOemA
SetThreadDesktop
CreateDesktopA
wsprintfA
DispatchMessageA
shell32
SHGetFolderPathA
Sections
.text Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ