Static task
static1
Behavioral task
behavioral1
Sample
9480ab408608a7c5b981ca52cb5fdd982710fe9e8a779d436419522199a99dba.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
9480ab408608a7c5b981ca52cb5fdd982710fe9e8a779d436419522199a99dba.exe
Resource
win10v2004-20220812-en
General
-
Target
9480ab408608a7c5b981ca52cb5fdd982710fe9e8a779d436419522199a99dba
-
Size
297KB
-
MD5
8202c9adb002aba57938f09c16d6894a
-
SHA1
dc3f3ecfca988c4a12e4767e2c3607b91181e7e0
-
SHA256
9480ab408608a7c5b981ca52cb5fdd982710fe9e8a779d436419522199a99dba
-
SHA512
3a373ff032bb8f1021695c49b44e7f0d856b78a66622677f1115063690e60c53e251c6b017f36e6e7f6366b982c9805676173ba17f7ee947312c680defd0ea81
-
SSDEEP
3072:9vInRqSULuEWsBMB16wLssNNsJSxxDrd748fMZGVNI6qR/YhfVF8bY:9vIbzETB2isN+JSL1LfMZGVNI6mA
Malware Config
Signatures
Files
-
9480ab408608a7c5b981ca52cb5fdd982710fe9e8a779d436419522199a99dba.exe windows x86
b8ac8236657d7e3b9642e9942b809f03
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
wsock32
__WSAFDIsSet
version
GetFileVersionInfoSizeW
winmm
waveOutSetVolume
comctl32
ImageList_Remove
mpr
WNetUseConnectionW
user32
UnregisterHotKey
gdi32
PolyBezierTo
comdlg32
GetSaveFileNameW
advapi32
RegEnumValueW
shell32
SHBrowseForFolderW
ole32
CreateStreamOnHGlobal
oleaut32
LoadRegTypeLi
Sections
.text Size: 178KB - Virtual size: 532KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 118KB - Virtual size: 149KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE