Static task
static1
Behavioral task
behavioral1
Sample
9bd1c48284fb086b2e6344bf9b7f7b5bd9f56649558d68d445e22646e233fad8.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9bd1c48284fb086b2e6344bf9b7f7b5bd9f56649558d68d445e22646e233fad8.exe
Resource
win10v2004-20221111-en
General
-
Target
9bd1c48284fb086b2e6344bf9b7f7b5bd9f56649558d68d445e22646e233fad8
-
Size
432KB
-
MD5
4ae2d17853931a9aae5b2b1a07ec4bf5
-
SHA1
2b4ed0a491638481ea0100e00ec882bdecc54f5c
-
SHA256
9bd1c48284fb086b2e6344bf9b7f7b5bd9f56649558d68d445e22646e233fad8
-
SHA512
917335cc4735e74df98af889e12edea2c44349c731f7c71aaa770e3260272ad6562ac2a16baa6aced8254b42de750e061cf03fce73cb9f36dad92c83e61bedb0
-
SSDEEP
6144:M5RrekOWPJIeRo0N6lVponTq3CMaem5DBl6pHldyfSHVEoMt4/9FuNIRRx:MTeXGJro0Nmpoe1annspHn1E7uGY
Malware Config
Signatures
Files
-
9bd1c48284fb086b2e6344bf9b7f7b5bd9f56649558d68d445e22646e233fad8.exe windows x86
ea262de87e8e961845b1715ce7ecbc63
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
Sleep
GetTempPathW
VirtualAlloc
GetProcAddress
CreateEventA
CreateMutexA
RemoveDirectoryW
LoadLibraryW
GetLastError
VirtualProtectEx
GetSystemTime
CloseHandle
CreateFileA
GetConsoleMode
SetConsoleMode
ReadConsoleInputA
VirtualQuery
ExitProcess
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersionExA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
LoadLibraryA
GetACP
GetOEMCP
GetCPInfo
HeapAlloc
HeapReAlloc
RaiseException
RtlUnwind
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW
HeapSize
GetLocaleInfoA
VirtualProtect
GetSystemInfo
user32
ImpersonateDdeClientWindow
DdeSetQualityOfService
SendMessageA
PostMessageA
PeekMessageA
ShowWindow
GetSystemMetrics
Sections
.INIT Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 388KB - Virtual size: 385KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 448KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ