Static task
static1
Behavioral task
behavioral1
Sample
f9d3a18254b34ebe6d7c6914eee333fabf74ebc77e8ad7b55a2ced5c79655097.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
f9d3a18254b34ebe6d7c6914eee333fabf74ebc77e8ad7b55a2ced5c79655097.exe
Resource
win10v2004-20221111-en
General
-
Target
f9d3a18254b34ebe6d7c6914eee333fabf74ebc77e8ad7b55a2ced5c79655097
-
Size
172KB
-
MD5
74b82593faee784c7edc27ac5d525e4e
-
SHA1
c11472a745aefc94a8e02865668bd1d432a41dc4
-
SHA256
f9d3a18254b34ebe6d7c6914eee333fabf74ebc77e8ad7b55a2ced5c79655097
-
SHA512
bfe2c63668e2bfb1ce5354dfed618478d073235744ab4f2fc6f738e25672ae630ee3b2bac268d2de0a8f710caff77e2c827209094f08bdb20f7faaf8530b8ee2
-
SSDEEP
1536:ib/5rj2a4lb5FzeQe/0mNInN4IYL4WWOgZhnvK0L4AKqcXwNW7Tfuwu:IdjYF5ma4IYL4pOgbf0ATcAYnu
Malware Config
Signatures
Files
-
f9d3a18254b34ebe6d7c6914eee333fabf74ebc77e8ad7b55a2ced5c79655097.exe windows x86
5773190c6d9639690548b2d8af9c68a6
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
CopyFileA
GetDriveTypeA
VirtualFree
Sleep
ExitProcess
user32
GetMessagePos
Sections
.text Size: 512B - Virtual size: 228B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Vcmul. V Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Cackxkmu Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Mji. Pid Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 253B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 101KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 67KB - Virtual size: 95KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
tarjwzy Size: - Virtual size: 76KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE