Static task
static1
Behavioral task
behavioral1
Sample
c9a5ec70ff50086476023b8eae1911d3a155837de6b16541268ed188ebb71ed8.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
c9a5ec70ff50086476023b8eae1911d3a155837de6b16541268ed188ebb71ed8.exe
Resource
win10v2004-20221111-en
General
-
Target
c9a5ec70ff50086476023b8eae1911d3a155837de6b16541268ed188ebb71ed8
-
Size
107KB
-
MD5
5971cc400b43b48fe401c12e8b340da0
-
SHA1
ab8d275dcba5645c34b219b80babac86b8ce1561
-
SHA256
c9a5ec70ff50086476023b8eae1911d3a155837de6b16541268ed188ebb71ed8
-
SHA512
6cfa38b66b6e11c261ac27322b379f74931fe39c4db47d9699c5faac04b85150f0645b2e600e920b1b7d44b7b629b8e7137928ad42b831b3c708546738d24147
-
SSDEEP
1536:ehGhXIa3dTcWGzwlNriM5dBzJcfVotqUdxLbpjVrs2ryrd1vUQuqQGFNiNwc+c:ehlaNTcWG8N5dB+tiqUdxLbHs2quGf9
Malware Config
Signatures
Files
-
c9a5ec70ff50086476023b8eae1911d3a155837de6b16541268ed188ebb71ed8.exe windows x86
5241b7b3e771e1606d55addc9d1c9dbb
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Heap32ListNext
SetSystemTimeAdjustment
GetExpandedNameW
SetUserGeoID
WriteProfileStringA
GlobalGetAtomNameW
ReadProcessMemory
FillConsoleOutputAttribute
GetConsoleCommandHistoryLengthA
GetAtomNameA
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.brdata Size: 51KB - Virtual size: 72KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE