Static task
static1
Behavioral task
behavioral1
Sample
9ea6a761d3b3eaadce42e2dac62441becb91d7b0c6830eb78279337ca8ed6583.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
9ea6a761d3b3eaadce42e2dac62441becb91d7b0c6830eb78279337ca8ed6583.exe
Resource
win10v2004-20221111-en
General
-
Target
9ea6a761d3b3eaadce42e2dac62441becb91d7b0c6830eb78279337ca8ed6583
-
Size
307KB
-
MD5
35ef48894e2c36f32aed0a8aab9b18f0
-
SHA1
b170d90ea5b7394236625abeaffd55f7cfcf9c7f
-
SHA256
9ea6a761d3b3eaadce42e2dac62441becb91d7b0c6830eb78279337ca8ed6583
-
SHA512
84089a6ad90d318cc6bb4f17a787b75d17c91bf517bc4d8abefeb6b4528e464aa024a0f35e1eb769b7a30e18a6912468e6393eac5bc973ea16fba67843b8cb20
-
SSDEEP
6144:ISjc2VwR34nDw2rL4Q8e21U4JH6pk19rRJssReU8ZI1Fvk1:9uRoM2rL9E6+FnAZITM
Malware Config
Signatures
Files
-
9ea6a761d3b3eaadce42e2dac62441becb91d7b0c6830eb78279337ca8ed6583.exe windows x86
7ce182ba55a9e375a076fe367033a42d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetCurrentDirectoryA
GetStringTypeW
SetFilePointer
CreateFileMappingW
GetShortPathNameW
GetACP
CreateMailslotW
DeleteFileA
GetVersion
DeleteFileA
DeleteFileA
GetProcessHeap
Heap32Next
SetEndOfFile
GetConsoleAliasW
LoadLibraryA
GetModuleHandleW
WriteConsoleW
GetStringTypeW
GetConsoleTitleA
SetEnvironmentVariableA
VirtualAlloc
Heap32First
msoeacct
DllGetClassObject
ValidEmailAddress
DllCanUnloadNow
GetDllMajorVersion
Sections
.text Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 298KB - Virtual size: 298KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.avr Size: 1024B - Virtual size: 544B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ