Static task
static1
Behavioral task
behavioral1
Sample
9c462ff74e5b5e4c46a9fa8e6101a1c297f7ee83b26e42f28e365736618af410.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
9c462ff74e5b5e4c46a9fa8e6101a1c297f7ee83b26e42f28e365736618af410.exe
Resource
win10v2004-20220812-en
General
-
Target
9c462ff74e5b5e4c46a9fa8e6101a1c297f7ee83b26e42f28e365736618af410
-
Size
68KB
-
MD5
4e90d8fa26f062f0e144d9b70445a9ce
-
SHA1
08c6c37b6193c57f9a3cfaec44b1c49336024213
-
SHA256
9c462ff74e5b5e4c46a9fa8e6101a1c297f7ee83b26e42f28e365736618af410
-
SHA512
8782439d52039345101b8fa974aa94aef1342937974003a731b413d57a71b9e885fff1d8c329328256f6f37b6a4226cfd6f3f7688e85bd364f87c3bab6803736
-
SSDEEP
1536:kJfes93pqJWVQyojJ8PSwmW28Gv9XW6E:kJfe45q4aL98PSTJ8Gv9h
Malware Config
Signatures
Files
-
9c462ff74e5b5e4c46a9fa8e6101a1c297f7ee83b26e42f28e365736618af410.exe windows x86
964bb72e31836ce79fd1cf3f6414fbe7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
WriteFile
CreateFileA
LockResource
LoadResource
SizeofResource
FindResourceA
GetModuleHandleA
UnmapViewOfFile
GetFileSize
MapViewOfFile
CreateFileMappingA
SetEvent
ExitProcess
WaitForSingleObject
WinExec
GetLastError
CreateEventA
FreeLibrary
GetProcAddress
LoadLibraryA
CreateMutexA
GetWindowsDirectoryA
GetModuleFileNameA
msvcrt
sprintf
_mbsupr
_ltoa
strlen
_except_handler3
_mbsrchr
_exit
_XcptFilter
exit
__p___initenv
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
__dllonexit
_onexit
rpcrt4
UuidToStringA
UuidCreate
RpcStringFreeA
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.aspack Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.adata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE