Static task
static1
Behavioral task
behavioral1
Sample
a9195f5b69442fb1c267c8a368f3abcf086605e2c1a45c5aee948d99367e95b0.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
a9195f5b69442fb1c267c8a368f3abcf086605e2c1a45c5aee948d99367e95b0.exe
Resource
win10v2004-20220901-en
General
-
Target
a9195f5b69442fb1c267c8a368f3abcf086605e2c1a45c5aee948d99367e95b0
-
Size
434KB
-
MD5
605b61ffd3de18e2349b1572056be6ab
-
SHA1
27df7e19b5d69d914228373c0bb40ccb26de2707
-
SHA256
a9195f5b69442fb1c267c8a368f3abcf086605e2c1a45c5aee948d99367e95b0
-
SHA512
69ede9a9d8429ca594962c60c9a012eabd554edde9ede7a2c4bc7eab04a14d100cf624b185f0711293f3c01907894e1005f3548d8ff72906937cb7ab564dff65
-
SSDEEP
12288:sx2/R6PiZLaoc+q40ZR6z3/VjzxPRshoQQ6emnnLA:sx2pPZLaClW4z3/V5uZQSn8
Malware Config
Signatures
Files
-
a9195f5b69442fb1c267c8a368f3abcf086605e2c1a45c5aee948d99367e95b0.exe windows x86
c05f9d206c1db686c7aa3fe59fdc6f78
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetEnvironmentVariableW
SetLastError
GetLocalTime
GetStdHandle
RemoveDirectoryW
GetConsoleTitleW
HeapSize
GetTickCount
OpenProcess
Sleep
GetFileAttributesA
GetModuleHandleA
HeapCreate
GetTickCount
CloseHandle
WaitForSingleObject
ReleaseMutex
GetStartupInfoW
CreateFileA
FindClose
GetCurrentDirectoryA
WaitForMultipleObjects
CreateMutexW
ExitProcess
DeleteFileA
user32
PeekMessageA
GetDC
CallWindowProcW
DispatchMessageW
DispatchMessageW
GetClassInfoA
GetDC
MessageBoxA
GetDC
FindWindowW
GetWindowLongA
GetSysColor
FillRect
vbajet32
VBAGetExprSrv
VBAGetExprSrv
VBAGetExprSrv
VBAGetExprSrv
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 512B - Virtual size: 624KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 428KB - Virtual size: 427KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ