Static task
static1
Behavioral task
behavioral1
Sample
a9e9a11897a4f77bdc380252ec6a0761ed74dfcc471cf5ecd2b7bd51ef4f035c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a9e9a11897a4f77bdc380252ec6a0761ed74dfcc471cf5ecd2b7bd51ef4f035c.exe
Resource
win10v2004-20220812-en
General
-
Target
a9e9a11897a4f77bdc380252ec6a0761ed74dfcc471cf5ecd2b7bd51ef4f035c
-
Size
750KB
-
MD5
4aafce651e717a4e2692c127a7a91823
-
SHA1
1cbfb6d0005eba8cad3db00ca508ebaf16796c42
-
SHA256
a9e9a11897a4f77bdc380252ec6a0761ed74dfcc471cf5ecd2b7bd51ef4f035c
-
SHA512
bad8c45a4f6503c0c31fb46e5bb7550ed740d0268c3fba0b6aae87a8d249f284fab5b5319392f83b28fd8af51a615887a28f1a2bcb17b35360cb3950cf5792cc
-
SSDEEP
12288:fV9fp20fayGInmqINhg1gbk21/XrotyxuSmuoxqQZxJJckDt4wY3y1hH:fVL27/InmDKgbk21fctmmfVPc/wV
Malware Config
Signatures
Files
-
a9e9a11897a4f77bdc380252ec6a0761ed74dfcc471cf5ecd2b7bd51ef4f035c.exe windows x86
06a4396558af1a29660910b4d887338e
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
OpenThread
GetFileAttributesA
ReleaseMutex
CloseHandle
GetStartupInfoA
WriteConsoleA
OpenEventW
DeleteFileA
SuspendThread
HeapDestroy
ExitProcess
GetCommandLineW
GetEnvironmentVariableW
GetTickCount
SetEvent
HeapCreate
CloseHandle
FindVolumeClose
FindResourceExW
GetModuleHandleA
user32
GetKeyState
GetSysColor
DispatchMessageA
SetFocus
IsZoomed
GetWindowLongA
GetCaretPos
GetClassInfoA
FindWindowA
DispatchMessageA
PeekMessageA
GetIconInfo
CallWindowProcW
htui
HTUI_ColorAdjustment
HTUI_ColorAdjustment
HTUI_ColorAdjustment
HTUI_ColorAdjustment
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 744KB - Virtual size: 744KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ