Static task
static1
Behavioral task
behavioral1
Sample
2f9867b4d770c6571f7919a1ab81c1e7f9137d574fe288ea7cd446e05a7ac12f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
2f9867b4d770c6571f7919a1ab81c1e7f9137d574fe288ea7cd446e05a7ac12f.exe
Resource
win10v2004-20220812-en
General
-
Target
2f9867b4d770c6571f7919a1ab81c1e7f9137d574fe288ea7cd446e05a7ac12f
-
Size
30KB
-
MD5
0edb3c40f428e87d0361a08806ded530
-
SHA1
a866254c7b364dcd86ad9141ebf097c72ec34ef1
-
SHA256
2f9867b4d770c6571f7919a1ab81c1e7f9137d574fe288ea7cd446e05a7ac12f
-
SHA512
8e1e278c9752bc9f2e0d71b6f0306d9b44e020d57e5526690aeb332d1fb9e1942ca114277237da6015ec33557f975569a7ce7042571a1918efa602a19efe5f72
-
SSDEEP
384:D6TIWEyWc2rbnMSb4CQWPhbb1bXzIWg7549VNT95XBfxtJI8yCdmaRx1TdZ32l8L:HXrbnMSb4XihbDz3NT9Dx44dTBeQ3l
Malware Config
Signatures
Files
-
2f9867b4d770c6571f7919a1ab81c1e7f9137d574fe288ea7cd446e05a7ac12f.exe windows x86
f4bb95a2ed29767e199a8a83e34ea89d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_AGGRESIVE_WS_TRIM
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
ExitProcess
GetModuleHandleW
GetStartupInfoW
GetCommandLineW
user32
FindWindowW
PostMessageW
shell32
SHLoadInProc
Sections
.text Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
eemdaqu Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE