Static task
static1
Behavioral task
behavioral1
Sample
9d0d0a8151421516489f5231a45644a1f5403b4d06e28c6bb3c8390feee90611.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
9d0d0a8151421516489f5231a45644a1f5403b4d06e28c6bb3c8390feee90611.exe
Resource
win10v2004-20221111-en
General
-
Target
9d0d0a8151421516489f5231a45644a1f5403b4d06e28c6bb3c8390feee90611
-
Size
304KB
-
MD5
7c4b4ddb9ef5f6cf73742a4bb244e260
-
SHA1
29ff78e983533bca9a4b34aa1ae2984d6f3bd37c
-
SHA256
9d0d0a8151421516489f5231a45644a1f5403b4d06e28c6bb3c8390feee90611
-
SHA512
d423bf34c3f2a9e88f67a126f958eca25d4daa8a768c26caa8e6e8a06ce9c79d77d8173c266722d15ae058dd19c2bbbd87247a28ecd133f3fbc00718dfdd040b
-
SSDEEP
6144:5WE3bbj9YF1kSxTQow/MCj+6c4gJ41NPLDcMO:5DbbZYF1kSlQoSMCzgK1NPLDnO
Malware Config
Signatures
Files
-
9d0d0a8151421516489f5231a45644a1f5403b4d06e28c6bb3c8390feee90611.exe windows x86
c19bff9c662cf567c03ad241710a5ee1
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetShortPathNameW
HeapFree
Heap32Next
GetStringTypeW
GetModuleHandleA
DeleteFileA
GetExitCodeProcess
DeleteFileA
HeapCreate
GetProcessHeap
CreateFileMappingW
GetConsoleAliasW
SetFilePointer
WriteConsoleW
DeleteFileA
GetVersion
GetStringTypeW
CreateMailslotW
SetEnvironmentVariableA
GetModuleHandleW
GetACP
SetCurrentDirectoryA
GetConsoleTitleA
mstscax
DllUnregisterServer
DllGetTscCtlVer
DllCanUnloadNow
DllRegisterServer
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data1 Size: 297KB - Virtual size: 297KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 1024B - Virtual size: 544B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ