Static task
static1
Behavioral task
behavioral1
Sample
b9888a24b9bfcafb6f0d96343290d419fdb66a31521ceca205759a30a84d367c.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
b9888a24b9bfcafb6f0d96343290d419fdb66a31521ceca205759a30a84d367c.exe
Resource
win10v2004-20220812-en
General
-
Target
b9888a24b9bfcafb6f0d96343290d419fdb66a31521ceca205759a30a84d367c
-
Size
19KB
-
MD5
03a9587c0fdb0615733d7fd11b57d121
-
SHA1
292aeabf3ff139188d2fd766a5bb76d076e30786
-
SHA256
b9888a24b9bfcafb6f0d96343290d419fdb66a31521ceca205759a30a84d367c
-
SHA512
5801e2163d7ffe224fc3d7bbb0c93f3dd307400c3a4b6014b96b5cc62688ca2ef38771baf490cce17b3c535223699f49118f085881f88b1e44a53a957b76ce23
-
SSDEEP
192:xLiEZ/NyuNYdy9tesyneO0yLk+0W5t2t4AVC2B3xVK7V/XrDT95BQu9wcOlYInpF:FdNyw9tbIcRW5t3AdiB/3J5BQGwcsznb
Malware Config
Signatures
Files
-
b9888a24b9bfcafb6f0d96343290d419fdb66a31521ceca205759a30a84d367c.exe windows x86
c3f8de1828725dc5e7d612abc8d54525
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
StrToIntA
kernel32
IsDebuggerPresent
GetCurrentProcess
InitializeCriticalSection
GetVersionExA
GetCPInfo
TerminateProcess
EnterCriticalSection
OpenProcess
LeaveCriticalSection
DeleteCriticalSection
GetLastError
ExitProcess
LocalFree
FormatMessageA
ReadFile
CreateFileA
VirtualAlloc
GetModuleHandleA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
user32
CreateWindowExA
MessageBoxA
wsprintfA
EnableWindow
ole32
CoInitialize
StringFromGUID2
CoCreateInstance
CLSIDFromString
CoTaskMemRealloc
CoUninitialize
oleaut32
LoadTypeLi
LoadRegTypeLi
Sections
.text Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ