Static task
static1
Behavioral task
behavioral1
Sample
9a64a851c5e4fa8675f1236f1353438bbb393b33778e010971cf71e60d714e70.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
9a64a851c5e4fa8675f1236f1353438bbb393b33778e010971cf71e60d714e70.exe
Resource
win10v2004-20220812-en
General
-
Target
9a64a851c5e4fa8675f1236f1353438bbb393b33778e010971cf71e60d714e70
-
Size
272KB
-
MD5
02913454b46f30e485108730492fb4b4
-
SHA1
05b59a1dac62ea21d9b2e5fa7d667410261722d9
-
SHA256
9a64a851c5e4fa8675f1236f1353438bbb393b33778e010971cf71e60d714e70
-
SHA512
18f1ef10e91a0a26d4369c9e275ff48fc6c60380428d3a2ad5bf7db2c8a03fc17e14d819d23b98e235ea56055a537e0bbb7a4f9ae7e3f2c4e8d18e155b6a48a3
-
SSDEEP
6144:t0bATIytwT59CfTe/N+YcRCSnuZ0+QHstwhn2HUrCOh:t0fy89Cq/UY9ZSOwh2HzOh
Malware Config
Signatures
Files
-
9a64a851c5e4fa8675f1236f1353438bbb393b33778e010971cf71e60d714e70.exe windows x86
a11ef335e186f928914164cff0210ac5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
memset
memcpy
_CIcosh
floor
ceil
strlen
realloc
__p__iob
free
_fileno
_setmode
malloc
calloc
fread
ferror
fseek
ftell
_fstat
feof
fclose
fopen
qsort
memmove
fprintf
_CIlog
frexp
memchr
kernel32
GetModuleHandleA
HeapCreate
HeapDestroy
ExitProcess
HeapAlloc
HeapFree
TlsAlloc
TlsGetValue
HeapReAlloc
TlsSetValue
WaitForMultipleObjects
EnterCriticalSection
CloseHandle
LeaveCriticalSection
GetCurrentThreadId
InitializeCriticalSection
GetCurrentProcess
GetCurrentThread
DuplicateHandle
CreateSemaphoreA
CreateThread
ReleaseSemaphore
user32
CallWindowProcA
winmm
mciSendCommandA
Sections
.code Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text Size: 37KB - Virtual size: 36KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_WRITE
.. Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
..aer Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ