Static task
static1
Behavioral task
behavioral1
Sample
9c34f4ba11fa732eda1ee93ffb792b35a1d8004d211973c87c162f29e492d470.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9c34f4ba11fa732eda1ee93ffb792b35a1d8004d211973c87c162f29e492d470.exe
Resource
win10v2004-20220901-en
General
-
Target
9c34f4ba11fa732eda1ee93ffb792b35a1d8004d211973c87c162f29e492d470
-
Size
206KB
-
MD5
820170f10105ae96216dee79c6f54619
-
SHA1
43be3f49b4e443634572458b2361611e50e523e8
-
SHA256
9c34f4ba11fa732eda1ee93ffb792b35a1d8004d211973c87c162f29e492d470
-
SHA512
6c0447b063f2b4ef5def312029a94d95e708050f5873fe37c60eaddb9d845361418d388b7285a7ff76e4dd56b7616444ddcec2b6aedbd503032b29c4222e34c6
-
SSDEEP
3072:7YbzUjda2IUFtqEqWDPuAQJXYIBLgU+XCOjBS/9sCQqp6FV2M/MJ4Lo8HecmbCwO:8bQ5Z1tbDP0aQLyl0uPqp6iM/8Oy131
Malware Config
Signatures
Files
-
9c34f4ba11fa732eda1ee93ffb792b35a1d8004d211973c87c162f29e492d470.exe windows x86
329d38cdd4767be9db3613db28708b6e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersionExA
ExitProcess
GetModuleHandleA
GetProcAddress
lstrlenA
GetProcessHeap
HeapAlloc
GetVersionExA
HeapFree
FlushFileBuffers
GetConsoleMode
GetConsoleCP
CreateFileA
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
WriteConsoleW
GetVersionExW
GetEnvironmentVariableW
GetTempPathW
GetModuleHandleW
CreateFileW
LoadLibraryExW
SetEvent
CreateThread
CreateProcessW
WaitForSingleObject
GetExitCodeProcess
MoveFileExW
CreateDirectoryW
ole32
CoRegisterMallocSpy
StringFromGUID2
CLSIDFromString
winmm
timeEndPeriod
comdlg32
GetOpenFileNameA
shlwapi
StrStrA
Sections
.text Size: 143KB - Virtual size: 143KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 61KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 78B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ