Static task
static1
Behavioral task
behavioral1
Sample
a9d6a99079b220d9df7dde8db747c49f16d1eff585b7732bd635fc758246ffa1.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
a9d6a99079b220d9df7dde8db747c49f16d1eff585b7732bd635fc758246ffa1.exe
Resource
win10v2004-20221111-en
General
-
Target
a9d6a99079b220d9df7dde8db747c49f16d1eff585b7732bd635fc758246ffa1
-
Size
140KB
-
MD5
6ba5b9731e6db43ec30e08f033aa1a84
-
SHA1
ed7e2cf4332e6ea585bd51d865b33ee97b0cc7fd
-
SHA256
a9d6a99079b220d9df7dde8db747c49f16d1eff585b7732bd635fc758246ffa1
-
SHA512
eec1cdcb637afc099655488a69bfe9cde678f955de70b5bac3b6b295ad4a23b63364245cb79937a4eea702c35059fe7f5d3fbc1c0a88880f70379d8c20336996
-
SSDEEP
1536:FEBFayceEurTR5O3tIAGk59vis1GbwncstuWdQkPwAFYgdDH8V3n:FEBYetXR03tIAv5fgwnxlQ+wSYgdDU
Malware Config
Signatures
Files
-
a9d6a99079b220d9df7dde8db747c49f16d1eff585b7732bd635fc758246ffa1.exe windows x86
eb324ed399075e26bb119f3d1ed43764
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ord697
ord404
ord240
ord606
ord571
ord388
ord247
ord344
ord424
ord777
ord329
ord327
ord888
ord233
ord232
ord849
ord309
ord832
ord401
ord868
ord871
ord510
ord923
ord921
ord494
ord491
ord502
ord558
ord557
ord428
ord425
ord74
ord391
ord330
ord365
ord176
ord106
ord367
ord702
ord422
ord450
ord259
ord48
ord941
ord78
ord468
ord935
ord518
ord512
ord874
ord469
ord906
ord397
ord581
ord932
ord901
ord577
ord824
ord508
ord514
user32
ord57
ord599
ord572
ord555
ord490
ord14
ord444
ord201
ord350
ord269
ord477
ord710
ord567
ord275
ord60
ord197
ord274
ord199
ord420
ord227
ord256
ord595
ord729
ord446
ord659
ord596
ord159
ord635
ord404
ord435
ord373
ord457
ord253
ord363
ord641
ord326
ord97
ord83
ord86
ord156
ord347
ord367
ord28
ord179
gdi32
ord406
ord533
ord222
ord464
ord460
ord72
ord81
ord144
ord45
ord64
ord422
ord411
ord51
ord46
ord525
ord541
ord567
ord584
ord19
ord141
ord284
comdlg32
ord110
winmm
ord201
ord207
ord206
ord186
comctl32
ord5
ord17
ord16
gifencode
ord1
ord4
ord5
ord3
ord2
svdvideo
ord83
ord100
ord82
ord87
ord84
ord75
mpegsys
ord46
mmxaudio
ord79
ord82
facehelp
ord33
ord37
ord22
ord21
ord20
ord15
ord17
ord35
ord34
ord6
ord9
ord8
ord7
ord29
ord32
ord11
ord13
ord12
ord30
ord25
ord1
Sections
.text Size: 48KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 72KB - Virtual size: 92KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE