Static task
static1
Behavioral task
behavioral1
Sample
d9cab8d96d34ca09700f3731ff717580c2b0f38dfd531dbdae59ae1c04d57336.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d9cab8d96d34ca09700f3731ff717580c2b0f38dfd531dbdae59ae1c04d57336.exe
Resource
win10v2004-20221111-en
General
-
Target
d9cab8d96d34ca09700f3731ff717580c2b0f38dfd531dbdae59ae1c04d57336
-
Size
91KB
-
MD5
a447358375d5c0af46ebcdb68c3f74bd
-
SHA1
b8be5bf3a28030e7cd501282b1facd6b7362ac7d
-
SHA256
d9cab8d96d34ca09700f3731ff717580c2b0f38dfd531dbdae59ae1c04d57336
-
SHA512
9e37719f041d15a4830645da3553d08f5beb78a837a45eb4a85da7086c014c70d37fd4de30d666b31d01b0de5ceda0d5eaf69dbb733839749970bddbfacd6fde
-
SSDEEP
1536:xbX4vwysKCmIU8yOuMtA/OGxVOG11MIxwvg4HsxCqeAf:BYwysKClSSbG+wMpIhxCRAf
Malware Config
Signatures
Files
-
d9cab8d96d34ca09700f3731ff717580c2b0f38dfd531dbdae59ae1c04d57336.exe windows x86
17a79a55f7d22f2f906fc6722c7a3512
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
BeginUpdateResourceA
InterlockedIncrement
FindResourceA
GlobalMemoryStatusEx
WritePrivateProfileStructW
CopyFileExA
EnumDateFormatsW
AddLocalAlternateComputerNameA
LZCopy
HeapUnlock
GetConsoleKeyboardLayoutNameW
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 77KB - Virtual size: 98KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE