Static task
static1
Behavioral task
behavioral1
Sample
9e0a059621e9bbf06613baebe6f5e8b774b83cd0edc774a0369778afc85e7bae.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
9e0a059621e9bbf06613baebe6f5e8b774b83cd0edc774a0369778afc85e7bae.exe
Resource
win10v2004-20220812-en
General
-
Target
9e0a059621e9bbf06613baebe6f5e8b774b83cd0edc774a0369778afc85e7bae
-
Size
80KB
-
MD5
821c7cbff9028ae41b97679405932990
-
SHA1
01c1edbfdb8d38e183afee3886760c2ca17b29f1
-
SHA256
9e0a059621e9bbf06613baebe6f5e8b774b83cd0edc774a0369778afc85e7bae
-
SHA512
221b08f415aa6d6746bfb524f577e115f3a00ffffe5c77691dde894dd515de49bd517b793025f054e137a4fc7c36fc2bcc8b8092a2935e4743bc812de720746b
-
SSDEEP
1536:59LhgH9GtxwyLFNBBvCx1byHZAwigLwRSid/QO82hW8fPL:TQm1xWMnigLi9eO8vYL
Malware Config
Signatures
Files
-
9e0a059621e9bbf06613baebe6f5e8b774b83cd0edc774a0369778afc85e7bae.exe windows x86
35811cefd3a468bc3025acfafaba2e05
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetMailslotInfo
GetConsoleKeyboardLayoutNameA
IsValidCodePage
GlobalMemoryStatus
LocalUnlock
WriteConsoleOutputAttribute
CreateProcessW
RaiseException
EraseTape
GlobalSize
GetProcessWorkingSetSize
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rrdata Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE