Static task
static1
Behavioral task
behavioral1
Sample
9370f45532f98cb4717e2fb6473e7b0d297ce964dfe75975e0a5e32765cecaf6.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9370f45532f98cb4717e2fb6473e7b0d297ce964dfe75975e0a5e32765cecaf6.exe
Resource
win10v2004-20220812-en
General
-
Target
9370f45532f98cb4717e2fb6473e7b0d297ce964dfe75975e0a5e32765cecaf6
-
Size
179KB
-
MD5
0ded17e131033a673e7ecb9e4b3b7f40
-
SHA1
38db9fb482772ecedbba4289ca49bcab0327187e
-
SHA256
9370f45532f98cb4717e2fb6473e7b0d297ce964dfe75975e0a5e32765cecaf6
-
SHA512
7fda8dec3c96edf8211abb16e0c4e677af52b600c3525c1f8dd95f5130cf8b45414bf48ede3d409b314cef1602c8944e92cfa45c24fe4c478d7548d23f34576d
-
SSDEEP
3072:WW05fG6cmj3kiSUCuiYw5+EhGfENo85ptog3Tl6zj62N0AAAerSZMAZHdXZL3Ezg:f6a
Malware Config
Signatures
Files
-
9370f45532f98cb4717e2fb6473e7b0d297ce964dfe75975e0a5e32765cecaf6.exe windows x86
df57a2a7b4b2e21a0b558c480222b82c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetLastError
GetModuleFileNameA
GetCommandLineA
IsDBCSLeadByte
LocalFree
CloseHandle
ExitProcess
ReadConsoleInputA
SetConsoleMode
GetConsoleMode
CreateFileA
WriteFile
GetStdHandle
lstrlenA
lstrcatA
lstrcpyA
FormatMessageA
FreeLibrary
GetProcAddress
LoadLibraryA
GetEnvironmentVariableA
GetModuleHandleA
MultiByteToWideChar
WideCharToMultiByte
GetCurrentProcess
lstrcmpiA
lstrcmpA
SetConsoleTitleA
GetVersionExA
SetEnvironmentVariableA
FindClose
FindFirstFileA
GetFullPathNameA
InterlockedIncrement
LocalAlloc
GetExitCodeThread
WaitForSingleObject
CreateThread
GetCurrentThreadId
LoadResource
FindResourceExA
GetUserDefaultLangID
GetSystemDefaultLangID
SetLastError
lstrlenW
RtlUnwind
user32
CharNextA
DispatchMessageA
CharLowerA
GetMessageA
CharPrevA
PostThreadMessageA
LoadStringA
CharToOemA
TranslateMessage
wvsprintfA
ole32
CoInitialize
CoRegisterClassObject
CoTaskMemFree
CoTaskMemAlloc
CoCreateInstance
CLSIDFromString
CoGetClassObject
CoUninitialize
oleaut32
SysFreeString
Sections
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 150KB - Virtual size: 150KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 12KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE