Static task
static1
Behavioral task
behavioral1
Sample
d9f9664bc43f60dd9b4888e80551ea826dcc768a3307c0478a45a28f48d429da.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
d9f9664bc43f60dd9b4888e80551ea826dcc768a3307c0478a45a28f48d429da.exe
Resource
win10v2004-20220812-en
General
-
Target
d9f9664bc43f60dd9b4888e80551ea826dcc768a3307c0478a45a28f48d429da
-
Size
305KB
-
MD5
8a6b19b7598bd7a4df1cc8fd640760b3
-
SHA1
2ee5dc054b6cfe9cac3efcfd42277349d5d6dbbc
-
SHA256
d9f9664bc43f60dd9b4888e80551ea826dcc768a3307c0478a45a28f48d429da
-
SHA512
7fe24a0b0924afdb206d0fd0edea61d9a241cd3c62ac5872010977107f0f41d6dc0241220b2c7f92c09da25b62de4e13598e9d510897339d161c8ffe48b62c8f
-
SSDEEP
6144:Ts8k8pVvTg8x6sVPWEhlHh845tfKAzCWAU:A8Xppz6FE/BN5pKAzRA
Malware Config
Signatures
Files
-
d9f9664bc43f60dd9b4888e80551ea826dcc768a3307c0478a45a28f48d429da.exe windows x86
d0a1caa6f8a96c59ce551d01384dd3a5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ReleaseMutex
lstrlenW
TlsGetValue
GlobalFlags
CreateEventW
FindClose
GetCurrentProcessId
HeapCreate
GetCurrentThreadId
IsBadStringPtrW
GetDriveTypeA
WriteFile
InitializeCriticalSection
GetFileTime
FindAtomA
LoadLibraryW
LocalFree
GetPrivateProfileStringA
GetEnvironmentVariableW
ReleaseMutex
user32
IsWindow
GetKeyboardType
SetFocus
CallWindowProcW
DispatchMessageA
DrawStateW
GetClientRect
GetSysColor
CreateWindowExA
GetSysColor
GetClassInfoA
EndDialog
DrawTextA
rastapi
DeviceDone
DeviceDone
DeviceDone
DeviceDone
DeviceDone
advapi32
InitializeSid
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 352KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 295KB - Virtual size: 294KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ