Static task
static1
Behavioral task
behavioral1
Sample
b9d4f89e1fdf2041ed84539df1378dd96574bab65500d0e5527f54c84708dbbb.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
b9d4f89e1fdf2041ed84539df1378dd96574bab65500d0e5527f54c84708dbbb.exe
Resource
win10v2004-20221111-en
General
-
Target
b9d4f89e1fdf2041ed84539df1378dd96574bab65500d0e5527f54c84708dbbb
-
Size
12KB
-
MD5
b1bd61fed43894e38284f1e5f95f2684
-
SHA1
cfd2915c3bde1874832a3fe405eb45d9034acd82
-
SHA256
b9d4f89e1fdf2041ed84539df1378dd96574bab65500d0e5527f54c84708dbbb
-
SHA512
9c56a2e27b632fb973e455498b9917f1eda93b791efb94b23c97bc10451fbd89dce8ae79ed7709946bbea121de01aafad7a37b2cb4f1419b92c9bb1d590889d4
-
SSDEEP
96:qkxG5rs8oJax5zTOS2s+Xvn+SSgsEtg/pugJlCHeXWwPVaKIlMrErUttYDE9btTT:qvmJ8kXvn+B+qpuxHemwPVaJ3NDE9CIb
Malware Config
Signatures
Files
-
b9d4f89e1fdf2041ed84539df1378dd96574bab65500d0e5527f54c84708dbbb.exe windows x86
51307b206b2f93f4cbbdb73f92f224fa
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
EnterCriticalSection
GlobalDeleteAtom
GetDriveTypeA
CloseHandle
InterlockedExchange
HeapCreate
SetErrorMode
SetConsoleOutputCP
FileTimeToLocalFileTime
GetLastError
LockResource
GlobalAddAtomA
GetStdHandle
LoadLibraryExA
GetACP
Sleep
RaiseException
VirtualProtect
GetLocaleInfoA
GlobalUnlock
GlobalFree
user32
ShowWindow
GetWindowTextA
GetMenuItemInfoA
OemToCharW
GetFocus
SetForegroundWindow
DrawEdge
IsIconic
GetParent
GetWindow
GetActiveWindow
ClipCursor
BeginPaint
ReleaseDC
DrawTextA
GetClassNameA
ValidateRect
EndPaint
GetCursorPos
wtsapi32
WTSLogoffSession
WTSCloseServer
WTSQueryUserToken
WTSFreeMemory
WTSOpenServerA
netapi32
DsRoleCancel
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 696KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ