Static task
static1
Behavioral task
behavioral1
Sample
18900d92c9a458d71c1830cbf1886c12680994b90a1f27f51d013bd08f73e253.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
18900d92c9a458d71c1830cbf1886c12680994b90a1f27f51d013bd08f73e253.exe
Resource
win10v2004-20220812-en
General
-
Target
18900d92c9a458d71c1830cbf1886c12680994b90a1f27f51d013bd08f73e253
-
Size
66KB
-
MD5
f9e484ee51cea0e8ccb86d6f3bfcc92e
-
SHA1
410ea991abe4b0238c6a2e18f63807b811b3afd0
-
SHA256
18900d92c9a458d71c1830cbf1886c12680994b90a1f27f51d013bd08f73e253
-
SHA512
67bec4523f94ca252809cf0e5cc9df7a28c2f37a660ae8afefbc159911d9dc1639a501c244e8760657e50ab3bee6655bfcefd0fc0c8857e7ad643a49f84dd1f7
-
SSDEEP
1536:gC5S5SxbgXDVmN+sKv8nzXP0j85NeXRtkTgCRc9LMJfAOrCKhBb:Lx4V7sKvcPAMNeBtk0CROLaIOjrb
Malware Config
Signatures
Files
-
18900d92c9a458d71c1830cbf1886c12680994b90a1f27f51d013bd08f73e253.exe windows x86
e4b47695a6e118f53e7f3ab2bdf12f79
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
OpenProcess
SetCriticalSectionSpinCount
WritePrivateProfileSectionW
QueueUserAPC
LocalFileTimeToFileTime
ExitVDM
FindResourceW
GlobalUnlock
ReadFileEx
ReplaceFile
FoldStringW
_hread
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 51KB - Virtual size: 70KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE