Static task
static1
Behavioral task
behavioral1
Sample
db9b9a3aa0698d38fdccbbbc2fbc46a57aa8c3e092e4ebd3ae3f233dd73de27d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
db9b9a3aa0698d38fdccbbbc2fbc46a57aa8c3e092e4ebd3ae3f233dd73de27d.exe
Resource
win10v2004-20221111-en
General
-
Target
db9b9a3aa0698d38fdccbbbc2fbc46a57aa8c3e092e4ebd3ae3f233dd73de27d
-
Size
510KB
-
MD5
2a90032a44bfdc878098fd3ab1c42c80
-
SHA1
3807a72749db5224082cf3d7973a270f013d17aa
-
SHA256
db9b9a3aa0698d38fdccbbbc2fbc46a57aa8c3e092e4ebd3ae3f233dd73de27d
-
SHA512
e22d0b4a3b15fa9b2c795c97b961262b81ec9e8f6e5caa1890ea00232b4fe2e694b21c709243d61316402c72be776489108d81e4179e6bcc09177827436fd81a
-
SSDEEP
6144:e0SY2jVZa1zFHRPh8y7gXu2Tw/yzZCAIos14UKoepTH1WVJ/Ozgfca7n4L8w48c2:sIzFHL1UhIN14roepg/marM8wuQFr00z
Malware Config
Signatures
Files
-
db9b9a3aa0698d38fdccbbbc2fbc46a57aa8c3e092e4ebd3ae3f233dd73de27d.exe windows x86
b7900495da8b095a162dbfecc3d7521d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntdll
RtlFlushSecureMemoryCache
kernel32
CreateFileW
user32
GetProcessWindowStation
GetDesktopWindow
Sections
.text Size: 503KB - Virtual size: 504KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 313B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE