Static task
static1
Behavioral task
behavioral1
Sample
9e34d95ec548e288cf4468441e5f8906a3ced41890f7e2344a501ef79bcac6ab.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
9e34d95ec548e288cf4468441e5f8906a3ced41890f7e2344a501ef79bcac6ab.exe
Resource
win10v2004-20220812-en
General
-
Target
9e34d95ec548e288cf4468441e5f8906a3ced41890f7e2344a501ef79bcac6ab
-
Size
320KB
-
MD5
a3a5a3694c8b61ada4804034325924e0
-
SHA1
904cb436bb29b5c33caa82c26f67a77a0e9ce0e2
-
SHA256
9e34d95ec548e288cf4468441e5f8906a3ced41890f7e2344a501ef79bcac6ab
-
SHA512
6314196affbeaf37765348185276d625a8b4f7089a17fcb3e4c17f91ac6f82a485ee0ec7725435f1cf5619d107abb7195a2581233e012c0b98070964cbc0639d
-
SSDEEP
6144:zCZOpQH2RfS155ONNXBuWoJBO9OMbHLkAqF7Ief9UmM7/uT:zCMM2EB0NxDIBuOFe7/uT
Malware Config
Signatures
Files
-
9e34d95ec548e288cf4468441e5f8906a3ced41890f7e2344a501ef79bcac6ab.exe windows x86
3ff0e4d25a3b32bdd48a35f7556fc95f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetDriveTypeA
AddLocalAlternateComputerNameA
ConvertThreadToFiber
FindAtomW
QueryActCtxW
LZOpenFileW
ChangeTimerQueueTimer
GetDiskFreeSpaceA
ShowConsoleCursor
LZRead
FlushConsoleInputBuffer
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.brdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tc Size: 244KB - Virtual size: 244KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE