Static task
static1
Behavioral task
behavioral1
Sample
9c6b0c5e187c5283722aa527c0ca462defaaaa22a3e7ebea059e046bf88161ef.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
9c6b0c5e187c5283722aa527c0ca462defaaaa22a3e7ebea059e046bf88161ef.exe
Resource
win10v2004-20220901-en
General
-
Target
9c6b0c5e187c5283722aa527c0ca462defaaaa22a3e7ebea059e046bf88161ef
-
Size
4.1MB
-
MD5
4fd5e76e382135eaa7057c47d89e841b
-
SHA1
09999db41d0bbf6a8ee694a2f5d71dca06ef9d8a
-
SHA256
9c6b0c5e187c5283722aa527c0ca462defaaaa22a3e7ebea059e046bf88161ef
-
SHA512
840086e96c357816311c8636420eabc656ebe285ca9f734a30b9c7da7c34f0f9da676e85e13b2e07455528d1ee6fb16d85c55bddeba8974fba7c174beba56505
-
SSDEEP
98304:XerKzs2oQnx1AEETbHCFs6wjXZ7ZEjvb0:vXvS+ynjJ7ZEU
Malware Config
Signatures
Files
-
9c6b0c5e187c5283722aa527c0ca462defaaaa22a3e7ebea059e046bf88161ef.exe windows x86
20568fc01f7a6a608452834f60ca9b01
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
OpenJobObjectA
EnumTimeFormatsA
GetComputerNameA
SetEndOfFile
WriteProcessMemory
GetNamedPipeHandleStateA
GetLogicalDriveStringsA
GetCurrentDirectoryA
VirtualAlloc
GetCommModemStatus
GetSystemDefaultLangID
GlobalDeleteAtom
HeapCompact
UnregisterWait
GlobalFindAtomA
PeekConsoleInputA
LoadLibraryA
WriteConsoleInputA
Module32Next
UnlockFile
SetConsoleIcon
ReleaseMutex
AddAtomW
d3d9
Direct3DCreate9
advapi32
CredDeleteA
Sections
.text Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 499KB - Virtual size: 839KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 363KB - Virtual size: 363KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 402KB - Virtual size: 402KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ