Static task
static1
Behavioral task
behavioral1
Sample
a9986e05d907e6ba57b44fafae12e72b81373d968ecf8cbbad859b9a9a4bfb29.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a9986e05d907e6ba57b44fafae12e72b81373d968ecf8cbbad859b9a9a4bfb29.exe
Resource
win10v2004-20220812-en
General
-
Target
a9986e05d907e6ba57b44fafae12e72b81373d968ecf8cbbad859b9a9a4bfb29
-
Size
304KB
-
MD5
343bd4311f289b73e0d92b2eec070911
-
SHA1
88535685f03850b663ff11da04aa014817cf1f2f
-
SHA256
a9986e05d907e6ba57b44fafae12e72b81373d968ecf8cbbad859b9a9a4bfb29
-
SHA512
fc5b8ed5116b8e7452d4c81987fd5de7addec3bd83ad837643b56031e4d36896b96a2ebb932771fd1aa4e024823d76b1090a2045d2a08be7293dbd92fb7f2051
-
SSDEEP
6144:e9R+u0yALHtcl60hOMePwqPgDTSb7aD6hP7u457G6+laxz7:ejONcx0/PXl17y65N
Malware Config
Signatures
Files
-
a9986e05d907e6ba57b44fafae12e72b81373d968ecf8cbbad859b9a9a4bfb29.exe windows x86
1d70994c1750d554524f856796260df8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetPrivateProfileIntA
ExitProcess
TlsGetValue
FindAtomA
GlobalFree
LoadLibraryW
HeapDestroy
MapViewOfFile
FindClose
lstrlenW
SetLastError
GetSystemTime
CreateFileMappingA
VirtualAlloc
GetFileAttributesA
GetTickCount
IsDebuggerPresent
GetComputerNameA
CloseHandle
GetModuleHandleW
user32
EndDialog
CallWindowProcA
GetClassInfoA
GetDlgItem
GetClientRect
CreateWindowExA
DispatchMessageA
DrawStateA
DestroyCaret
GetMenu
CloseWindow
FillRect
GetCaretPos
ntshrui
IsPathSharedA
IsFolderPrivateForUser
IsPathSharedW
GetNetResourceFromLocalPathA
GetLocalPathFromNetResourceA
dpnet
DllGetClassObject
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 352KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 295KB - Virtual size: 294KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ