Static task
static1
Behavioral task
behavioral1
Sample
9101ad3056bb6f481f263fd6ec2bfbd3f5c2cce468b175169f29724c04ee56d5.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9101ad3056bb6f481f263fd6ec2bfbd3f5c2cce468b175169f29724c04ee56d5.exe
Resource
win10v2004-20220812-en
General
-
Target
9101ad3056bb6f481f263fd6ec2bfbd3f5c2cce468b175169f29724c04ee56d5
-
Size
769KB
-
MD5
00f3de2a5b7716d8820597704b0cd2c5
-
SHA1
19dd67f082a6260eb14ea8756dd358c1d11f1d95
-
SHA256
9101ad3056bb6f481f263fd6ec2bfbd3f5c2cce468b175169f29724c04ee56d5
-
SHA512
dc145e1decfdc2be94af1fd15d44a67dce47f5e32e78213d57982754b5c306814e81998ddb1a1065032eca5ce783339028ee6f0bcf9673b0341d809fa4f10acc
-
SSDEEP
12288:NkHxn8p6gidjDNuIZuxGmieEnL1z70QsaLWGqrTMfQHm9vgMtVpdvcJQw7V0xCvD:Nk5u6XY4Z70QsaioQH0vgMWtpIUD
Malware Config
Signatures
Files
-
9101ad3056bb6f481f263fd6ec2bfbd3f5c2cce468b175169f29724c04ee56d5.exe windows x86
35d4f758fe65879291ca346151b2d7f2
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersion
RemoveDirectoryW
CreateFileMappingW
HeapFree
OpenEventW
ReleaseMutex
ResetEvent
GetDriveTypeA
FindClose
Sleep
CreateFileA
VirtualProtectEx
CreateMutexA
SetStdHandle
DeleteFileA
WriteConsoleW
WriteFile
lstrlenA
GetFileSize
CreateDirectoryW
FindClose
ReleaseSemaphore
GetCommandLineA
GetModuleHandleA
RemoveDirectoryW
user32
MessageBoxA
GetWindowLongA
DestroyMenu
DestroyMenu
DrawTextW
IsWindow
IsZoomed
PeekMessageA
CreateIcon
GetClassInfoA
DispatchMessageA
GetSysColor
FindWindowA
efsadu
EfsDetail
EfsDetail
EfsDetail
EfsDetail
Sections
.text Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 761KB - Virtual size: 760KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ