Static task
static1
Behavioral task
behavioral1
Sample
9371e28f84d3acb8c2dfbb0844f2367a16fe4002951f8aad863afc3b267086d7.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
9371e28f84d3acb8c2dfbb0844f2367a16fe4002951f8aad863afc3b267086d7.exe
Resource
win10v2004-20220812-en
General
-
Target
9371e28f84d3acb8c2dfbb0844f2367a16fe4002951f8aad863afc3b267086d7
-
Size
452KB
-
MD5
71d6ed940591385ed97b2ec5dbddf6b6
-
SHA1
81ddc8361d0ff6c069df24ef44be01a2633bedb1
-
SHA256
9371e28f84d3acb8c2dfbb0844f2367a16fe4002951f8aad863afc3b267086d7
-
SHA512
c058fe4916fb61a62d10ddb9842c931a84ed5d1140e8e207d59e13a0f02863566830d01c64caf9e36bd6cf7b227d446f4433fed0464961f3f8afaac83ae719b3
-
SSDEEP
12288:PzRL/Ghvx/n9Y2DEJnUoTXBDGXRiyhAbZfJ/wjeVZ:PFW/OeUXUAbYK
Malware Config
Signatures
Files
-
9371e28f84d3acb8c2dfbb0844f2367a16fe4002951f8aad863afc3b267086d7.exe windows x86
32ea9f617ae688e40706450a4648c9f1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetSystemDirectoryW
FlushInstructionCache
OpenMutexW
VirtualAlloc
OutputDebugStringA
VirtualFree
WriteConsoleW
SetFilePointerEx
SetStdHandle
GetConsoleMode
GetConsoleCP
FlushFileBuffers
CloseHandle
GetTickCount
EncodePointer
DecodePointer
GetCommandLineW
RaiseException
RtlUnwind
IsProcessorFeaturePresent
GetLastError
ExitProcess
GetModuleHandleExW
GetProcAddress
MultiByteToWideChar
WideCharToMultiByte
HeapSize
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
SetLastError
GetCurrentThreadId
HeapFree
HeapAlloc
GetProcessHeap
GetStdHandle
GetFileType
DeleteCriticalSection
GetStartupInfoW
GetModuleFileNameW
WriteFile
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
IsDebuggerPresent
EnterCriticalSection
LeaveCriticalSection
LoadLibraryExW
HeapReAlloc
GetStringTypeW
LCMapStringW
OutputDebugStringW
CreateFileW
user32
GetForegroundWindow
GetWindowLongW
GetWindowTextW
GetDesktopWindow
GetMessageTime
IsZoomed
Sections
.text Size: 66KB - Virtual size: 65KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 354KB - Virtual size: 354KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ