Static task
static1
Behavioral task
behavioral1
Sample
9d9bbbb5f25031692e9ffde7bff59d7293593abb4cd09d0d8c9ca42c7e6468a4.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
9d9bbbb5f25031692e9ffde7bff59d7293593abb4cd09d0d8c9ca42c7e6468a4.exe
Resource
win10v2004-20221111-en
General
-
Target
9d9bbbb5f25031692e9ffde7bff59d7293593abb4cd09d0d8c9ca42c7e6468a4
-
Size
40KB
-
MD5
9743683708e418bd689c331a9b5e6ab3
-
SHA1
42d36ac509d221fad2b40c048244e8e9784970ed
-
SHA256
9d9bbbb5f25031692e9ffde7bff59d7293593abb4cd09d0d8c9ca42c7e6468a4
-
SHA512
6f2438cfd2491873ff219079f3f92708774945cf43646398c22bc13375eded646f7cc47784f340f730b3e57f766e09790fd0494ac0d432f75feb87d0991be176
-
SSDEEP
384:am1Wlabb3k3XdpcVIigoAWQURAT6176dhwreqlqeqXqW4Im:b1LboDceigSBRAT8BreKBwAIm
Malware Config
Signatures
Files
-
9d9bbbb5f25031692e9ffde7bff59d7293593abb4cd09d0d8c9ca42c7e6468a4.exe windows x86
0d575c377d00e6adb153580d22ddaa1e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
_except_handler3
__set_app_type
__dllonexit
_onexit
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
??1type_info@@UAE@XZ
strcmp
??3@YAXPAX@Z
??2@YAPAXI@Z
strlen
malloc
free
_CxxThrowException
__CxxFrameHandler
realloc
memset
_controlfp
memcpy
_stricmp
imagehlp
MakeSureDirectoryPathExists
kernel32
GetLastError
InterlockedExchange
LocalAlloc
FreeLibrary
GetStartupInfoA
GetModuleHandleA
SetFilePointer
GetFileSize
ReadFile
CreateFileA
WriteFile
CloseHandle
Sleep
IsBadReadPtr
VirtualFree
VirtualProtect
VirtualAlloc
LoadLibraryA
GetProcAddress
GetProcessHeap
LocalFree
RaiseException
Sections
.text Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.didat Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 1013B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ