Static task
static1
Behavioral task
behavioral1
Sample
b9ed150a791830e7cdb93bd9ff4bcae06c8be654c78da0e6ccaf3aa6b68e8024.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b9ed150a791830e7cdb93bd9ff4bcae06c8be654c78da0e6ccaf3aa6b68e8024.exe
Resource
win10v2004-20220812-en
General
-
Target
b9ed150a791830e7cdb93bd9ff4bcae06c8be654c78da0e6ccaf3aa6b68e8024
-
Size
107KB
-
MD5
4f9c0adc4f908a9527d447960fb97eb2
-
SHA1
5634ba72d7ee1507c7f398870616c045bda94834
-
SHA256
b9ed150a791830e7cdb93bd9ff4bcae06c8be654c78da0e6ccaf3aa6b68e8024
-
SHA512
dc4093e5848e3cff90ef85782bc9fa2a235988264733b0e5c2f6b1f1893bb12d89f7d95c5267c910ab9273432ad65c38b8d8d099a4a1e6c9faa65a574fbd9496
-
SSDEEP
1536:5riOJnnqpr/cKBw4ORKG42nr97XoBPzJU3j+XMmPGOxp4md21aAx+:5ricnqB8r974h9U3OMGB4nL+
Malware Config
Signatures
Files
-
b9ed150a791830e7cdb93bd9ff4bcae06c8be654c78da0e6ccaf3aa6b68e8024.exe windows x86
c1cdf177686e6b3a6149a70f3ec1b44f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
OutputDebugStringA
SetLastError
GetUserDefaultLangID
VirtualProtect
GetVersionExA
RtlMoveMemory
GetModuleHandleA
LocalAlloc
LoadResource
CompareFileTime
GetCurrentThread
GlobalUnlock
GetProcAddress
DeleteFileA
FreeEnvironmentStringsA
GlobalHandle
SizeofResource
SetHandleCount
CreateDirectoryA
GlobalFree
GetFileType
GetCurrentProcessId
IsDBCSLeadByte
GetTempPathA
GetThreadLocale
GetStringTypeA
OpenProcess
msvcrt
__p___initenv
_initterm
_exit
tan
__p__fmode
_XcptFilter
__p__commode
_except_handler3
__set_app_type
_controlfp
__getmainargs
_adjust_fdiv
Sections
.text Size: 1024B - Virtual size: 578B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Tiko Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 100B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ