Static task
static1
Behavioral task
behavioral1
Sample
9652caeea9a2c5cf94d73ff23cd48975000789c890810b92be53ba3355ffb18a.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9652caeea9a2c5cf94d73ff23cd48975000789c890810b92be53ba3355ffb18a.exe
Resource
win10v2004-20220812-en
General
-
Target
9652caeea9a2c5cf94d73ff23cd48975000789c890810b92be53ba3355ffb18a
-
Size
54KB
-
MD5
60ec79ff678377cf6b380859482f2970
-
SHA1
3d04c49e2b630b7e02693464f917670dc4a97287
-
SHA256
9652caeea9a2c5cf94d73ff23cd48975000789c890810b92be53ba3355ffb18a
-
SHA512
da9fab65b46b7e04e5a07d8aae41fd04d6604f4fb09ec76e53369fd39dc79d575c0e184bc2c296db6a8136343b2d84e99be273960e1d6e02ed1cf3f557618ec0
-
SSDEEP
1536:HQPcdozAop/zmZB9f1QnSwoP1gtqd3YAUCk/MmzXIsi9Ur:6zAurmZB9m81xWADkEWXI6r
Malware Config
Signatures
Files
-
9652caeea9a2c5cf94d73ff23cd48975000789c890810b92be53ba3355ffb18a.exe windows x86
8fcb18513584a4184ff932543a1cdeec
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersion
lstrlenA
lstrcpyA
GetTickCount
GetTempPathA
GetSystemTime
FindAtomA
CloseHandle
WriteFile
CreateFileA
GetLocalTime
lstrcatA
lstrcpynA
GetModuleFileNameA
GetProcAddress
GetModuleHandleA
GetLastError
LoadLibraryA
GetTempFileNameA
CreateMutexA
OpenMutexA
ExitProcess
lstrcmpA
GetCommandLineA
RtlUnwind
VirtualQuery
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
user32
InflateRect
EqualRect
ClientToScreen
wsprintfA
GetWindowRect
GetFocus
IsWindowVisible
GetCaretPos
GetCursorPos
shlwapi
SHGetValueA
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 39KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE