Static task
static1
Behavioral task
behavioral1
Sample
9555b2f7026df4701671565cd11f8959da8c2df999a9e559957e8d9ff7d680fa.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9555b2f7026df4701671565cd11f8959da8c2df999a9e559957e8d9ff7d680fa.exe
Resource
win10v2004-20220812-en
General
-
Target
9555b2f7026df4701671565cd11f8959da8c2df999a9e559957e8d9ff7d680fa
-
Size
409KB
-
MD5
a3011dca3cee7976f0552f34059fe700
-
SHA1
15e0277d354481103501adb5e8d7c99dbd48d3dd
-
SHA256
9555b2f7026df4701671565cd11f8959da8c2df999a9e559957e8d9ff7d680fa
-
SHA512
538f1b414d6c7ad7f059fa215a9832f9f24084a43c848ee3a88744492657bcfc824bf263a3634335775bb5490f9c72f7d75eef6debf5de9ac52fc2bd14e06a98
-
SSDEEP
6144:25tOURzNMWr3Q5NTIdR2vFFwuqkIHv+JhPxRed0PssRic/qDAGxXfP+A8/aD3Ph:25bNMpN8Tc0uqky+zPxMQ3CXxX+8Df
Malware Config
Signatures
Files
-
9555b2f7026df4701671565cd11f8959da8c2df999a9e559957e8d9ff7d680fa.exe windows x86
2d2c43d41854da99e874686798b1fb95
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
VirtualProtectEx
CloseHandle
GetModuleHandleA
GetPrivateProfileIntA
FindClose
GetFileAttributesW
CreateEventA
GetStringTypeA
GetVersionExA
GetPrivateProfileSectionA
LocalFlags
SetCommBreak
CreateDirectoryW
GlobalLock
GetFileAttributesW
RemoveDirectoryW
DeviceIoControl
SetLastError
HeapFree
GetCurrentThread
GetCurrentProcess
user32
IsWindow
IsZoomed
wsprintfW
DispatchMessageA
SetFocus
InsertMenuA
GetWindowTextW
PostMessageW
LoadCursorW
IsDialogMessageA
PeekMessageW
GetWindowLongW
SetCursorPos
netshell
DllGetClassObject
HrCreateDesktopIcon
DllCanUnloadNow
DllRegisterServer
uxtheme
CloseThemeData
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 11KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 240KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 400KB - Virtual size: 640KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.import Size: 512B - Virtual size: 396B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ