Static task
static1
Behavioral task
behavioral1
Sample
9776d17ac5e4ea100bb00e3fc98e2f4163fdba41a53dbb01907b5eea526e80fe.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
9776d17ac5e4ea100bb00e3fc98e2f4163fdba41a53dbb01907b5eea526e80fe.exe
Resource
win10v2004-20220812-en
General
-
Target
9776d17ac5e4ea100bb00e3fc98e2f4163fdba41a53dbb01907b5eea526e80fe
-
Size
21KB
-
MD5
397b94b66dbcdbbb2aa41f97e456db71
-
SHA1
2118e7d1a7789263add931327696222d5f9a84e4
-
SHA256
9776d17ac5e4ea100bb00e3fc98e2f4163fdba41a53dbb01907b5eea526e80fe
-
SHA512
d9ca52f95ef0e573a29a43b8e9a2e0f2323a8497a42c91d9a4bb73e096af049dc15d8460ea187c174c314b45e81e0593f7f946e303acc9ea67842ccc8898607f
-
SSDEEP
384:esAtgtVBZiyqMaRIGHGDY26HH3+m4GYZEhY61/oxQug7ifJNwJoPJ7lWR17lp:esAtqZitADY2Mum4pEhY61/oRgUfC1X
Malware Config
Signatures
Files
-
9776d17ac5e4ea100bb00e3fc98e2f4163fdba41a53dbb01907b5eea526e80fe.exe windows x86
270f737c20b4e242c9f3d6efca24016f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetErrorMode
GetStdHandle
OpenProcess
FindFirstFileA
FreeEnvironmentStringsA
FormatMessageA
GetLastError
CloseHandle
InterlockedExchange
FindNextFileA
FindClose
DisableThreadLibraryCalls
TerminateProcess
SetStdHandle
DuplicateHandle
GetEnvironmentStrings
ExitProcess
LocalFree
ReadFile
CreateFileA
VirtualAlloc
GetModuleHandleA
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
IsDebuggerPresent
user32
MessageBoxA
SetTimer
KillTimer
wsprintfA
ole32
CoInitialize
CoUninitialize
oleaut32
VariantCopy
VariantInit
VarUI4FromStr
VariantChangeType
VariantClear
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ