Static task
static1
Behavioral task
behavioral1
Sample
9841db656cfb21603a40ed1941d9c59862fb736ad08b697d2a46560ab022c2db.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9841db656cfb21603a40ed1941d9c59862fb736ad08b697d2a46560ab022c2db.exe
Resource
win10v2004-20220812-en
General
-
Target
9841db656cfb21603a40ed1941d9c59862fb736ad08b697d2a46560ab022c2db
-
Size
117KB
-
MD5
0dbfcce593ce9dd8edefb13c5a17f420
-
SHA1
2a023b8d1e2ac437027d894ec8352c5ced12165c
-
SHA256
9841db656cfb21603a40ed1941d9c59862fb736ad08b697d2a46560ab022c2db
-
SHA512
9243cd412c2f2bd83ba327347cf392e8375f63a2ba2fdde72658b65d4d274257f21e0ae800eb5b1da5c2ce6f2effb151a318e253a473e2a68e327268ca1ae203
-
SSDEEP
1536:nUhghmV6YTArRlF9V2DtCt4zm02LLtKSJWl4SHI85AuZA2L/PdE/Jvjdju3KN5x:ntmV4puBXKzmPdLtudy34J
Malware Config
Signatures
Files
-
9841db656cfb21603a40ed1941d9c59862fb736ad08b697d2a46560ab022c2db.exe windows x86
2294bf6df4eea48708fa25e6910dc208
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetExitCodeProcess
WaitForSingleObject
WriteFile
GetLocalTime
CloseHandle
SetFilePointer
FreeLibrary
CompareStringA
GetModuleHandleA
GetModuleFileNameA
GetWindowsDirectoryA
GetSystemDirectoryA
LoadLibraryA
InterlockedExchange
GetLastError
SetLastError
ExitProcess
GetVersionExA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
HeapFree
HeapAlloc
RtlUnwind
VirtualQuery
VirtualAlloc
HeapReAlloc
SetStdHandle
HeapSize
FlushFileBuffers
Sections
.text Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rrdata Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE