Static task
static1
Behavioral task
behavioral1
Sample
9fb3d75ba54dcc73e059cc3b9b22362d43979ca02f98bc095cba77bc6e12aa3e.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
9fb3d75ba54dcc73e059cc3b9b22362d43979ca02f98bc095cba77bc6e12aa3e.exe
Resource
win10v2004-20220812-en
General
-
Target
9fb3d75ba54dcc73e059cc3b9b22362d43979ca02f98bc095cba77bc6e12aa3e
-
Size
37KB
-
MD5
fb414be562c5401fe9f55a503437eb9b
-
SHA1
76565af8fb9b452c6d4804ff4a802ae3fd6f711e
-
SHA256
9fb3d75ba54dcc73e059cc3b9b22362d43979ca02f98bc095cba77bc6e12aa3e
-
SHA512
8eef66dc806e0f1c7f588e0048d93a6514379f5065fcd6ee9fb1917e6055991fab6f7b94572eeb139f8ae1745a70a34db54c6bfb2021932110e8bdeb3b372177
-
SSDEEP
384:DgFrM0yqYYOml7SRyy8XkSoEXlEG9WVA0K7w/o35jHGUL3WuQn:DUMQyydbFXlEEr0IwKLGULan
Malware Config
Signatures
Files
-
9fb3d75ba54dcc73e059cc3b9b22362d43979ca02f98bc095cba77bc6e12aa3e.exe windows x86
68eae5754e3c6d723be3aa141ee01e47
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
QueryPerformanceCounter
GetCurrencyFormatW
GetEnvironmentVariableA
HeapAlloc
SetMailslotInfo
GetStringTypeA
LCMapStringW
LCMapStringA
MultiByteToWideChar
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
HeapDestroy
HeapCreate
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetCPInfo
GetACP
GetOEMCP
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
GetStringTypeW
user32
GetQueueStatus
ole32
CoInitialize
Sections
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 80KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE