Static task
static1
Behavioral task
behavioral1
Sample
0915eb750b11e94953c1986391d89c8a.exe
Resource
win7-20220812-en
General
-
Target
0915eb750b11e94953c1986391d89c8a.exe
-
Size
9.6MB
-
MD5
0915eb750b11e94953c1986391d89c8a
-
SHA1
71486f38fdb43239ccf56b6349e0eaf86e68022a
-
SHA256
d72645347b3fa6134cc416b6b9d73eec9d4ef2af4dbf26c6b91da795144c394c
-
SHA512
aa9d1049c4ea0500782db8957f8d9ef8df707994c5ea8f9a8855b9c3d01f8f209f3165aa576b1b04ec7117fc3506aeb664259d7a310342b60b6f769d6303ce61
-
SSDEEP
196608:P/JjqWE4GnFcaCCnTwaJ6qu8jKmEHEByu0cssD1MGQQtgIL:P/8tCWwaJju85X0hGgIL
Malware Config
Signatures
Files
-
0915eb750b11e94953c1986391d89c8a.exe.exe windows x86
3ce76b536f35a4d5f94e60558d62769e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
SendMessageA
CharUpperBuffW
CharUpperBuffW
kernel32
LocalFree
GetSystemTimeAsFileTime
LocalAlloc
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
advapi32
GetSidSubAuthority
wsock32
WSAStartup
shell32
CommandLineToArgvW
ws2_32
freeaddrinfo
ole32
CoUninitialize
secur32
GetUserNameExA
psapi
GetModuleFileNameExA
Sections
D:hg]j1I Size: - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
kut?DF%m Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Hy6rYV"0 Size: - Virtual size: 592B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
r8N4w#Yi Size: - Virtual size: 2.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
]KZ^\Mo( Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
(cd;o:`L Size: - Virtual size: 4.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.\w$ Size: - Virtual size: 3.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.*Q7 Size: 1024B - Virtual size: 960B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.h/= Size: 9.6MB - Virtual size: 9.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
T!80pAgQ Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ