Static task
static1
Behavioral task
behavioral1
Sample
f9fc16eb364940532a3b897da9c80d7f54d91511fdcb519e93cffd9a43f23cf4.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
f9fc16eb364940532a3b897da9c80d7f54d91511fdcb519e93cffd9a43f23cf4.exe
Resource
win10v2004-20221111-en
General
-
Target
f9fc16eb364940532a3b897da9c80d7f54d91511fdcb519e93cffd9a43f23cf4
-
Size
536KB
-
MD5
e1cb58de30227bfe5f323f099d2916e5
-
SHA1
e962293ae059515a377cab965f01d080adec04be
-
SHA256
f9fc16eb364940532a3b897da9c80d7f54d91511fdcb519e93cffd9a43f23cf4
-
SHA512
0226e76adc652316499bdfd52286d334a4cb579dbef76a302163ae5a6e39209d52237c07ce742823ad361e83624d45023367a996ffab7ace0d4fbc76a26f7cce
-
SSDEEP
12288:Lhs7o+UyYCXT1FX62ANgtaKy6ttttaea:LK8kX62Avcttttk
Malware Config
Signatures
Files
-
f9fc16eb364940532a3b897da9c80d7f54d91511fdcb519e93cffd9a43f23cf4.exe windows x86
df8ea28af7a6624fd8080378843f5ddd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
DeleteFileA
GlobalSize
GetStartupInfoA
FindClose
CloseHandle
GetConsoleTitleA
HeapCreate
GetModuleFileNameW
CloseHandle
GetCommandLineA
WriteFile
Sleep
GetFileTime
GlobalFlags
DeviceIoControl
lstrlenA
GetDriveTypeW
GetExitCodeProcess
GetTickCount
GetModuleHandleA
user32
DrawTextW
DestroyWindow
DestroyMenu
LoadImageA
GetWindowLongW
CallWindowProcW
DispatchMessageA
IsZoomed
PeekMessageA
FillRect
DispatchMessageA
BeginPaint
GetParent
dssec
DSEditSecurity
DSEditSecurity
DSEditSecurity
DSEditSecurity
imagehlp
ImageUnload
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 384KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 529KB - Virtual size: 528KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ