Static task
static1
Behavioral task
behavioral1
Sample
9815cff6a2d2c3c0e9b47c1f0279c33982f7faccc0e09525af71b1c7fb2fc997.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
9815cff6a2d2c3c0e9b47c1f0279c33982f7faccc0e09525af71b1c7fb2fc997.exe
Resource
win10v2004-20221111-en
General
-
Target
9815cff6a2d2c3c0e9b47c1f0279c33982f7faccc0e09525af71b1c7fb2fc997
-
Size
114KB
-
MD5
f1864caf64bf18f995b3d556cd9ba31b
-
SHA1
377bee71d11abb87f3c93c0176d831c9624e6a8f
-
SHA256
9815cff6a2d2c3c0e9b47c1f0279c33982f7faccc0e09525af71b1c7fb2fc997
-
SHA512
7b74a4e54b59cf1a09adaa07c08712e82f824c3e02ff82d1d7fac530129e4bdac9642d8a66a9e599982baa6b55f12ebce3669a5fbe123a8b3d6bbaa8a47ba771
-
SSDEEP
3072:dxFeedn4obP4J92kCb/KJD5kOK/zxDZ2d:dHZd4obu2/Sk51
Malware Config
Signatures
Files
-
9815cff6a2d2c3c0e9b47c1f0279c33982f7faccc0e09525af71b1c7fb2fc997.exe windows x86
958d2278ae3f8e5bd681c227f61353ad
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
AddAtomA
CancelIo
ClearCommError
CloseHandle
ContinueDebugEvent
ExitProcess
FindAtomA
FindNextChangeNotification
FormatMessageA
GetAtomNameA
GetCPInfo
GetCommTimeouts
GetCommandLineA
GetConsoleCP
GetDiskFreeSpaceA
GetFileType
GetLastError
GetModuleHandleA
GetPrivateProfileStructA
GetProcAddress
GetProcessAffinityMask
GetProcessWorkingSetSize
GetStartupInfoA
GetSystemDefaultLCID
GlobalCompact
GlobalSize
GlobalUnWire
IsBadHugeReadPtr
IsDebuggerPresent
LoadLibraryExA
LocalReAlloc
PeekConsoleInputA
PurgeComm
SetEvent
SetFileAttributesA
SetLastError
SetUnhandledExceptionFilter
VirtualQueryEx
VirtualUnlock
WideCharToMultiByte
msvcrt
__getmainargs
__p__environ
__p__fmode
__set_app_type
_assert
_cexit
_iob
_onexit
_setmode
abort
atexit
free
malloc
memset
rand
signal
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 105KB - Virtual size: 105KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 224B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 368B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE