Static task
static1
Behavioral task
behavioral1
Sample
09d0397f02646cb4627d8ec60407c6b0a37664107d775efacc8d9977ce43240f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
09d0397f02646cb4627d8ec60407c6b0a37664107d775efacc8d9977ce43240f.exe
Resource
win10v2004-20220812-en
General
-
Target
09d0397f02646cb4627d8ec60407c6b0a37664107d775efacc8d9977ce43240f
-
Size
32KB
-
MD5
b8063184a76c164919b7849e158ab218
-
SHA1
38071ac867671dd5dbd4424781d72d54bfbd83d1
-
SHA256
09d0397f02646cb4627d8ec60407c6b0a37664107d775efacc8d9977ce43240f
-
SHA512
1e99059d4ac5885e4018a1585dbfb3a5f42076f2de7b7e2faa61bff8ee8a3656189c66ca799ecec9c6839f6185a982757fbb58b7f92ba539a8d2baa51acd3345
-
SSDEEP
768:2jG9E8n314lzcDQX2oooDkhAy8g7A3bb0IUUiM95ZCJhY:b4BcDQX2oooD+AyxArAIVJ9OJhY
Malware Config
Signatures
Files
-
09d0397f02646cb4627d8ec60407c6b0a37664107d775efacc8d9977ce43240f.exe windows x86
96b2e968c8d942b1c476ffc19880a760
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
strlen
_strlwr
strcpy
strcat
strcmp
kernel32
HeapAlloc
GetCommandLineA
GetTempPathA
FindResourceA
LoadResource
LockResource
DeleteFileA
WaitForSingleObject
CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetModuleFileNameA
GetTickCount
GetProcessHeap
user32
LoadStringA
wsprintfA
GetForegroundWindow
MessageBoxA
shlwapi
StrToIntA
Sections
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 29KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ