Static task
static1
Behavioral task
behavioral1
Sample
9d988d61e77adb19f3ed6427ad97f017f190e397c94d24f0268fc137c25129c9.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
9d988d61e77adb19f3ed6427ad97f017f190e397c94d24f0268fc137c25129c9.exe
Resource
win10v2004-20220812-en
General
-
Target
9d988d61e77adb19f3ed6427ad97f017f190e397c94d24f0268fc137c25129c9
-
Size
319KB
-
MD5
8b40362c674e308944f15ca6708ddd4e
-
SHA1
e363ee0131264b7aa919bc6766a00d9d09eadb0b
-
SHA256
9d988d61e77adb19f3ed6427ad97f017f190e397c94d24f0268fc137c25129c9
-
SHA512
90e12ace6b2fc482df93b89dbaf12054e0937ad792090819819e2db24603bd4d8ad6385c6c4131ef5b87bbee2f91660adc6e6173ba3ac3a2db88e63d1c7f6259
-
SSDEEP
6144:ZUBd44spckRv5j7WPLxCNbLrsadC718OrXfZdPIHLpQ6/xrU:6rkn+LxW1dCfBdgHLpz
Malware Config
Signatures
Files
-
9d988d61e77adb19f3ed6427ad97f017f190e397c94d24f0268fc137c25129c9.exe windows x86
3ecb28a97c9d453d2994a7104e9f0425
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
GetProcAddress
GetModuleHandleA
DeleteCriticalSection
GetModuleFileNameA
IsBadCodePtr
user32
BeginPaint
IsWindowUnicode
InSendMessage
DispatchMessageA
LoadAcceleratorsA
gdi32
CreateHatchBrush
ole32
CoInitialize
netapi32
NetDfsAddFtRoot
avifil32
AVIMakeFileFromStreams
Sections
.text Size: 100KB - Virtual size: 96KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 666B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 52B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vdata Size: 4KB - Virtual size: 78B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 206KB - Virtual size: 634KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.ldata Size: 512B - Virtual size: 256B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.wdata Size: 512B - Virtual size: 256B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE