Static task
static1
Behavioral task
behavioral1
Sample
9230a5338c5f80a71a324bfe5990bbae668be416f222595e5180f8413bc5c960.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9230a5338c5f80a71a324bfe5990bbae668be416f222595e5180f8413bc5c960.exe
Resource
win10v2004-20220812-en
General
-
Target
9230a5338c5f80a71a324bfe5990bbae668be416f222595e5180f8413bc5c960
-
Size
183KB
-
MD5
5113c5af402e48afbb81a07b3e9031f0
-
SHA1
6962e8770047b8b89b4fe8f25d85d8f391dd660c
-
SHA256
9230a5338c5f80a71a324bfe5990bbae668be416f222595e5180f8413bc5c960
-
SHA512
36df20dddd1c9aca568492370c9e102709234da028a9cd2aae3af804a0bfa8945800739f90b937e5f0cc405776524644fb270fb01e7e62e34102ac8f1c195d81
-
SSDEEP
1536:47hLbfzQdWjiFfjV1g586kQPAumsdTX61li2az29mC4:47hMd6MfjV15kTEs
Malware Config
Signatures
Files
-
9230a5338c5f80a71a324bfe5990bbae668be416f222595e5180f8413bc5c960.exe windows x86
dc2ab6458f82890e56d12e2b5db8f15d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
pbvm60
ord137
kernel32
GetCPInfo
WideCharToMultiByte
GetCommandLineA
GetModuleHandleA
GetStartupInfoA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
LoadLibraryA
GetACP
GetOEMCP
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
RtlUnwind
WriteFile
HeapFree
HeapAlloc
VirtualAlloc
GetProcAddress
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 10KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ