Static task
static1
Behavioral task
behavioral1
Sample
0f9a3c7dbd11667b36b8326ce84f72f2b9a94d3602537a84d4d07ea74acac820.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
0f9a3c7dbd11667b36b8326ce84f72f2b9a94d3602537a84d4d07ea74acac820.exe
Resource
win10v2004-20220812-en
General
-
Target
0f9a3c7dbd11667b36b8326ce84f72f2b9a94d3602537a84d4d07ea74acac820
-
Size
284KB
-
MD5
0c781987d72fa98d4f7e07079b18e520
-
SHA1
e3c5de59f04cf461c636da45e9d75d809b12772e
-
SHA256
0f9a3c7dbd11667b36b8326ce84f72f2b9a94d3602537a84d4d07ea74acac820
-
SHA512
897f24cd6789755fa7d797f384ec31350ffd7c44d7bf0ecac8624f1f7f6fb7db1064e9df9ba48c38698b4eea5ab9fc164b16ccdc42cbf102669be9123ac03af5
-
SSDEEP
6144:MwhBEHzWpUfPNr+DRD5fWBuxBl11tbpuiQpCv53Wljy9ojqV3XL:ZhB2zWSdWJZRxPPipCv53WgOj83b
Malware Config
Signatures
Files
-
0f9a3c7dbd11667b36b8326ce84f72f2b9a94d3602537a84d4d07ea74acac820.exe windows x86
b85f7741a49f0e564ff0742d092b0400
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleFileNameW
CreateFileW
GetFileSize
ReadFile
CloseHandle
VirtualAlloc
GetModuleHandleA
GetProcAddress
LoadLibraryA
VirtualFree
GetProcessHeap
GetCurrentProcess
TerminateProcess
HeapAlloc
HeapFree
Sections
.text Size: 259KB - Virtual size: 258KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 48B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ