Static task
static1
Behavioral task
behavioral1
Sample
9cf94fa9ed8e221f84ad24bde4d784707b170e16cedfba65c9f65511e88e4487.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
9cf94fa9ed8e221f84ad24bde4d784707b170e16cedfba65c9f65511e88e4487.exe
Resource
win10v2004-20221111-en
General
-
Target
9cf94fa9ed8e221f84ad24bde4d784707b170e16cedfba65c9f65511e88e4487
-
Size
929KB
-
MD5
1ab0562e7f15681994d8641e8febad5d
-
SHA1
45fb53e1129fbf4bdac5c47c0d938bba993c0894
-
SHA256
9cf94fa9ed8e221f84ad24bde4d784707b170e16cedfba65c9f65511e88e4487
-
SHA512
c17c05e57cda329165286da54c179bbc4bdb703d4a7b85f7f05aab3e4ceaa606a1d0cde2d36facce6af17c8a8d5fffda2c27a5856e6195775bcd332b2fc573c2
-
SSDEEP
24576:IfQTs8/EUOfF4U+m3eFN2ZwvS7E4PEAX7xpQE5:IGsifOfeBm0iyS7RPoE5
Malware Config
Signatures
Files
-
9cf94fa9ed8e221f84ad24bde4d784707b170e16cedfba65c9f65511e88e4487.exe windows x86
7fcd8e42fc29d285d169b6238e842613
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetTimeZoneInformation
VirtualAlloc
ExitProcess
LoadLibraryA
WaitForSingleObject
TerminateProcess
GetCurrentThread
InterlockedDecrement
GetLocaleInfoA
SetUnhandledExceptionFilter
GetShortPathNameA
GetCPInfo
ReleaseMutex
WriteConsoleW
TlsSetValue
GetCurrentProcessId
GetProcAddress
InterlockedExchange
GetDiskFreeSpaceA
GlobalFree
TlsFree
msvcrt
_stricmp
memmove
_wcsnicmp
wcschr
user32
IsWindowEnabled
TrackPopupMenu
GetWindowLongA
wsprintfA
ScreenToClient
GetActiveWindow
GetDlgItem
GetWindowLongW
advapi32
RegDeleteKeyW
RegCreateKeyExW
Sections
.text Size: 591KB - Virtual size: 590KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 515KB - Virtual size: 514KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 368KB - Virtual size: 369KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ