Static task
static1
Behavioral task
behavioral1
Sample
900d0b3ef1a918a1de59327b922ac08c182fa0d277170ff533b9dda10b11c3d9.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
900d0b3ef1a918a1de59327b922ac08c182fa0d277170ff533b9dda10b11c3d9.exe
Resource
win10v2004-20220901-en
General
-
Target
900d0b3ef1a918a1de59327b922ac08c182fa0d277170ff533b9dda10b11c3d9
-
Size
28KB
-
MD5
fb5b8dd0aa404af425ca87377e0311da
-
SHA1
4d34eb33de469edd60efc169f98239454431423b
-
SHA256
900d0b3ef1a918a1de59327b922ac08c182fa0d277170ff533b9dda10b11c3d9
-
SHA512
c3556ae23120906f90c82c9971fc7de92f41b3bbe8ad6608fa22a1f9949cd9ce9c8f8ee88d11aa2fe0662a307b5f5316ffc29f23533146787bdc3ae7e0be2b3e
-
SSDEEP
384:xF00xZ1+vx5pG+N9eMF5rdChsXFI908rP1OFJix5In:xFNn+f4+N9eMwya9JMa5In
Malware Config
Signatures
Files
-
900d0b3ef1a918a1de59327b922ac08c182fa0d277170ff533b9dda10b11c3d9.exe windows x86
0681ac0d4155cc5bc185aba0ca5b8828
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetThreadContext
WriteProcessMemory
VirtualAllocEx
GetProcAddress
GetModuleHandleA
ResumeThread
GetThreadContext
VirtualAlloc
CreateProcessA
GetLocalTime
LoadLibraryA
ReadProcessMemory
OutputDebugStringA
GetStartupInfoA
advapi32
RegQueryValueA
msvcrt
??2@YAPAXI@Z
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_exit
Sections
.text Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 868B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1008B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ