Static task
static1
Behavioral task
behavioral1
Sample
9ffde2d62de7c02d928229e0bed43d98395fc8d98755b8f7f008e337e484bc9e.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9ffde2d62de7c02d928229e0bed43d98395fc8d98755b8f7f008e337e484bc9e.exe
Resource
win10v2004-20220901-en
General
-
Target
9ffde2d62de7c02d928229e0bed43d98395fc8d98755b8f7f008e337e484bc9e
-
Size
56KB
-
MD5
cbce21857f15e8487aff534a5d4a0773
-
SHA1
1f9a213d4d4e4d6e384a3a23f8e308e4bf735550
-
SHA256
9ffde2d62de7c02d928229e0bed43d98395fc8d98755b8f7f008e337e484bc9e
-
SHA512
84dfe7bea4352d30d78c7744dfe543dc0796e663adca855067b1e4e79c4e4cbd4c0f138bec4d381bec1a2f2da09678f9374497b142e14b0e6550a6cd7d8aea2d
-
SSDEEP
1536:DCzVXOQYGhI+Pffi2wFzAkPYuMgudiLJFmq436:DCztZY+/ozxPDjJFms
Malware Config
Signatures
Files
-
9ffde2d62de7c02d928229e0bed43d98395fc8d98755b8f7f008e337e484bc9e.exe windows x86
7bc88552ae10ea44f9489005cb9ed597
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ReadConsoleInputW
FindFirstFileW
GetVolumeNameForVolumeMountPointW
GetAtomNameW
HeapQueryTagW
DeleteTimerQueue
FillConsoleOutputCharacterW
ReplaceFile
lstrcpyn
CompareStringA
GetProcessPriorityBoost
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE