Static task
static1
Behavioral task
behavioral1
Sample
9fc70b62e9d5c1197130165bfb7b12f92090dedddb2fc19d3d61594321d4bcd8.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
9fc70b62e9d5c1197130165bfb7b12f92090dedddb2fc19d3d61594321d4bcd8.exe
Resource
win10v2004-20221111-en
General
-
Target
9fc70b62e9d5c1197130165bfb7b12f92090dedddb2fc19d3d61594321d4bcd8
-
Size
59KB
-
MD5
0ad84c3f51cdbf9e56c4da61278fad94
-
SHA1
b2a10867045568219cebf7e9da872b705d7caa0a
-
SHA256
9fc70b62e9d5c1197130165bfb7b12f92090dedddb2fc19d3d61594321d4bcd8
-
SHA512
6873f8f50bdb99bdf74a176bedd4b40e0a12aba4a1a273c365c31b40537ee05f278ee5dabf05eddbc1adbafd2fdca51ab81dfc091101dcbc1b2ca4eb0ed27523
-
SSDEEP
1536:ZkYErsxvaTracGq3wqQxXQH9YDbidD5j28tsQUnwGUGdVraEz:Z6rsxvab9PQxXA22dVq8t8ZVraEz
Malware Config
Signatures
Files
-
9fc70b62e9d5c1197130165bfb7b12f92090dedddb2fc19d3d61594321d4bcd8.exe windows x86
f8498c87ef1b96eb0ffbf8bc1c351832
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
CloseHandle
CreateFileA
DeleteCriticalSection
DnsHostnameToComputerNameW
EnterCriticalSection
ExitProcess
GetACP
GetCPInfo
GetCommandLineA
GetCurrentThreadId
GetEnvironmentStrings
GetFileType
GetLastError
GetLocalTime
GetModuleFileNameA
GetModuleHandleA
GetNamedPipeInfo
GetOEMCP
GetProcAddress
GetProcessHeap
GetStartupInfoA
GetStdHandle
GetStringTypeW
GetVersion
GetVersionExA
GlobalMemoryStatus
GlobalUnlock
HeapAlloc
HeapFree
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
RaiseException
RtlUnwind
SetConsoleCtrlHandler
SetConsoleOutputCP
SetFilePointer
SetHandleCount
SetLastError
TerminateJobObject
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
VirtualQuery
WriteFile
user32
AnimateWindow
CharPrevExA
CreateWindowExA
DragObject
EnumThreadWindows
GetClassInfoW
GetClassLongA
GetClassNameW
GetKBCodePage
GrayStringW
MessageBoxA
OpenWindowStationW
RedrawWindow
UnregisterDeviceNotification
wsprintfA
ole32
CoFreeUnusedLibraries
CoGetObject
CoGetStandardMarshal
CoMarshalInterThreadInterfaceInStream
OleLoad
OleRegGetUserType
StgSetTimes
Sections
.text Size: 35KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 14KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 535KB - Virtual size: 534KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ