?1l99765@@YGXKPAUHBRUSH__@FD0
Static task
static1
Behavioral task
behavioral1
Sample
9609d918d7764909f73261bde7e1efdea77838e30efdf4bc61a6776b519f05f3.exe
Resource
win7-20221111-en
General
-
Target
9609d918d7764909f73261bde7e1efdea77838e30efdf4bc61a6776b519f05f3
-
Size
105KB
-
MD5
2de10802f114b22582967514ba9f51a0
-
SHA1
147eea8862f17a208754e76910b8dc1d8d94d6ec
-
SHA256
9609d918d7764909f73261bde7e1efdea77838e30efdf4bc61a6776b519f05f3
-
SHA512
d49fb880d03d36ee9fcf7365d6bba009937a98b59798c762a92e6111f6ba339f98bb0c9567a4ad2ab6d87d92c918c8ca886af0c1d9cbe505c1a08e6ca8455f4d
-
SSDEEP
1536:YmLhyxC1NKEI3CJj4HwJkDdUHVnJfLey7GdhhK7tyzPqSmeHH9cmFMbRdvBgO+C:YmB+CmwJ9hJjeyIhjDie92dvBgO+
Malware Config
Signatures
Files
-
9609d918d7764909f73261bde7e1efdea77838e30efdf4bc61a6776b519f05f3.exe windows x86
ee85d941d61c575139af92c46364549b
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
UrlIsW
PathIsRootW
PathIsLFNFileSpecA
PathIsSameRootA
kernel32
GetProfileSectionW
GetVersionExA
Exports
Exports
Sections
.text Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.mem21 Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 7KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mem09 Size: 14KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.mem87 Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ