Static task
static1
Behavioral task
behavioral1
Sample
9811d388ca5c019585c087970f405f88ef8de078cbfeabc7e491c3a7b7a11308.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9811d388ca5c019585c087970f405f88ef8de078cbfeabc7e491c3a7b7a11308.exe
Resource
win10v2004-20220812-en
General
-
Target
9811d388ca5c019585c087970f405f88ef8de078cbfeabc7e491c3a7b7a11308
-
Size
140KB
-
MD5
82df023953b0f2023cb60b1ae06b8770
-
SHA1
f7927ee19cf33c2f7f44d91e77a802f106769b11
-
SHA256
9811d388ca5c019585c087970f405f88ef8de078cbfeabc7e491c3a7b7a11308
-
SHA512
894b014c09f2114f8eece671f2ab1c8b0da74ad4ccd03513e231041e1e3614d320ed57e1a5d80fcfe32c49f0d75f4a900c8602ec500f7cde24c64e4d7dbd84ba
-
SSDEEP
3072:t6CztTrHPlhhH1+mASFbQfcI6xfWEThtCOS33Y7yRJG:NTbZ1+mAlkIWOETXCO6I7yDG
Malware Config
Signatures
Files
-
9811d388ca5c019585c087970f405f88ef8de078cbfeabc7e491c3a7b7a11308.exe windows x86
b69cdd35604db3acab0c406d98ab1c4e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
LoadLibraryA
GetProcAddress
HeapReAlloc
VirtualAlloc
HeapAlloc
GetOEMCP
GetACP
GetCPInfo
WriteFile
lstrlenA
CloseHandle
FreeConsole
ReadConsoleA
Sleep
OutputDebugStringW
OutputDebugStringA
RtlUnwind
HeapFree
VirtualFree
HeapCreate
HeapDestroy
GetFileType
GetStdHandle
GetStringTypeW
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
user32
SetFocus
SetTimer
IsWindow
SetWindowLongA
GetParent
MessageBoxA
TrackPopupMenu
DestroyIcon
GetWindowRect
CreateWindowExA
LoadMenuA
UpdateWindow
GetWindowLongA
gdi32
CreateDIBitmap
RealizePalette
PolyTextOutA
BitBlt
SelectObject
TextOutA
GetFontData
comdlg32
GetSaveFileNameA
PrintDlgA
shell32
SHGetFileInfoA
ole32
CoInitialize
CoCreateInstance
Sections
.text Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 112KB - Virtual size: 188KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE