?SanctuaryDown@@YGGPAUHKEY__@@PAUHPALETTE__@@@Z
Static task
static1
Behavioral task
behavioral1
Sample
a9936c16d07ec902c4b5800243e14906f3516ab04df74b9b45a29238275c08b0.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a9936c16d07ec902c4b5800243e14906f3516ab04df74b9b45a29238275c08b0.exe
Resource
win10v2004-20220812-en
General
-
Target
a9936c16d07ec902c4b5800243e14906f3516ab04df74b9b45a29238275c08b0
-
Size
124KB
-
MD5
6fbb1313a281e582324a3411b839ff19
-
SHA1
8e21b4821feb03bb39c6a800bbcddc6f597789fd
-
SHA256
a9936c16d07ec902c4b5800243e14906f3516ab04df74b9b45a29238275c08b0
-
SHA512
846b0d88db41ce9418cbc4d1f67fe353d1b41a5eb26c3549883d67a620f07f081c49ba7edbf32639b4c86b6d952be0b7f722c23f492d54b4e2617406e50a713e
-
SSDEEP
3072:jbfrUq0oHOC5/Of4u0pgvnMTxgoQUyRWx2m4JHB4JSzn6RxZVDCoUw:jbjLOSQ4xpgRHWTJSzqxL+Vw
Malware Config
Signatures
Files
-
a9936c16d07ec902c4b5800243e14906f3516ab04df74b9b45a29238275c08b0.exe windows x86
520a025474d7e1691fe6e0182ce653b1
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
ord29
kernel32
GetProcessHeap
user32
GetMessageW
GetForegroundWindow
GetDoubleClickTime
Exports
Exports
Sections
.text Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 456B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.tron Size: 512B - Virtual size: 81KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data5 Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data4 Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data3 Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data2 Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data1 Size: 20KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE