Static task
static1
Behavioral task
behavioral1
Sample
9835bc0aa67e6969d7cf90a7adcb6d2da8a9717994b644bf1c858d3b964eb74a.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
9835bc0aa67e6969d7cf90a7adcb6d2da8a9717994b644bf1c858d3b964eb74a.exe
Resource
win10v2004-20221111-en
General
-
Target
9835bc0aa67e6969d7cf90a7adcb6d2da8a9717994b644bf1c858d3b964eb74a
-
Size
304KB
-
MD5
77e179d46d07f984d18100ac243cc5f1
-
SHA1
3b4abce3408dc4b44b992b1a6e79f64b735ffde6
-
SHA256
9835bc0aa67e6969d7cf90a7adcb6d2da8a9717994b644bf1c858d3b964eb74a
-
SHA512
755f12e0043b86f0492f76a6fe1b887e67c3a749862c08795b63f026e16a2bd6bd20075b9e099e88fd9fdee3896c98ceffe312123e8f67aa8e365778c0e19cdf
-
SSDEEP
6144:zvN6DWsO0uKnhhn6i258hzoq/E9Ejg6KsU12cWdV8qqzt:jN6DWsO0hhn6/Soq/Em0N1BWz8qqz
Malware Config
Signatures
Files
-
9835bc0aa67e6969d7cf90a7adcb6d2da8a9717994b644bf1c858d3b964eb74a.exe windows x86
8549c199aea15e85ba48baec4b816dcd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetDriveTypeW
GetExitCodeProcess
ReleaseMutex
LocalSize
GetMailslotInfo
GetPrivateProfileIntW
FindVolumeClose
CloseHandle
CreateThread
ResetEvent
VirtualAlloc
GlobalFree
LocalFree
lstrlenA
FreeConsole
InterlockedExchange
CreateFileW
GetModuleHandleW
GetACP
ReadFile
user32
IsIconic
GetClientRect
EndDialog
DispatchMessageA
GetClassInfoA
GetKeyboardType
DrawStateW
GetDlgItem
CallWindowProcW
SetFocus
GetSysColor
CreateWindowExA
GetCursorInfo
dsprop
CheckADsError
CheckADsError
ReportError
CheckADsError
CheckADsError
desk.cpl
InstallScreenSaverW
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 348KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 294KB - Virtual size: 294KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ