Static task
static1
Behavioral task
behavioral1
Sample
9d9bfd584605227b2bc0eb292d40f70a4618f89563669a6da81f27fb80d5ee46.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
9d9bfd584605227b2bc0eb292d40f70a4618f89563669a6da81f27fb80d5ee46.exe
Resource
win10v2004-20221111-en
General
-
Target
9d9bfd584605227b2bc0eb292d40f70a4618f89563669a6da81f27fb80d5ee46
-
Size
52KB
-
MD5
1385a472000fc7ce823fdb02ec3df020
-
SHA1
5538fdfb7f14a54982f90ee5459c795542a1f54d
-
SHA256
9d9bfd584605227b2bc0eb292d40f70a4618f89563669a6da81f27fb80d5ee46
-
SHA512
1dcd0c03604dbf80d173d54bcd64d9a0104a9be6a346ea310603090758da19979d46baed538c89718954fb3ffe12eb0d505c14650f682c8e35f1984e097da252
-
SSDEEP
768:mqY3TzGpiutCI51ZgBjTLij12PDx16ciJ5A/Dtk4PD04a0jW11ZCyXC:mkxtCY1ZgRXi01Qot5L0Sji1u
Malware Config
Signatures
Files
-
9d9bfd584605227b2bc0eb292d40f70a4618f89563669a6da81f27fb80d5ee46.exe windows x86
c4fa3b11fa3213d1363897cebca4a788
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
oleaut32
SysFreeString
advapi32
RegQueryValueExA
user32
GetKeyboardType
ole32
CoTaskMemFree
shell32
SHGetSpecialFolderPathA
Sections
.text Size: 47KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE