Static task
static1
Behavioral task
behavioral1
Sample
9e93041640568594790aca6d9a14901e1dab038533fff912c709110e4dd4c6e4.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9e93041640568594790aca6d9a14901e1dab038533fff912c709110e4dd4c6e4.exe
Resource
win10v2004-20221111-en
General
-
Target
9e93041640568594790aca6d9a14901e1dab038533fff912c709110e4dd4c6e4
-
Size
52KB
-
MD5
33bd27927f7357627ed2844dc2ef97fb
-
SHA1
086f40183e3a815eae40b3364bdcbb496595b710
-
SHA256
9e93041640568594790aca6d9a14901e1dab038533fff912c709110e4dd4c6e4
-
SHA512
29405dbd1865f5ac7821b3955f233afe21b3624bc5a13ba4bf3d34e37d2bd22bb228650aff4e641ae9156697e5dcd3f2beba56642ebaf4105710718ec70ab326
-
SSDEEP
192:cfJNa+NCy+RrYSBkp8CGrQXAOqpPmZBdZDNawRoEO+3WLZrhryyiDSKRom+G7nhO:ufNtwN7BhmlXpG7yyiDSLcrh6oZS
Malware Config
Signatures
Files
-
9e93041640568594790aca6d9a14901e1dab038533fff912c709110e4dd4c6e4.exe windows x86
0c6abdc8469a2f291bbfd02bab2526c9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
SendMessageA
FindWindowA
advapi32
RegOpenKeyExA
RegQueryValueExA
kernel32
GetFileType
HeapCreate
HeapDestroy
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
HeapAlloc
GetStringTypeW
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
VirtualAlloc
HeapReAlloc
GetProcAddress
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hqfjsyj Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE