Static task
static1
Behavioral task
behavioral1
Sample
a9c3940f167e232dc4619f922dfe7f71327a138621e42085059222bf723772d4.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a9c3940f167e232dc4619f922dfe7f71327a138621e42085059222bf723772d4.exe
Resource
win10v2004-20221111-en
General
-
Target
a9c3940f167e232dc4619f922dfe7f71327a138621e42085059222bf723772d4
-
Size
697KB
-
MD5
20b7cf6316fd13fbfea6c89484a1f760
-
SHA1
2d6f4d5f2b703f285a9ff2e221815f6da9a1d5ac
-
SHA256
a9c3940f167e232dc4619f922dfe7f71327a138621e42085059222bf723772d4
-
SHA512
306e8533cfa09e4ba8f03a1cd193ee9ac545d3f04a378804caefa41e5defa79552c559b71d3a4d4c29b2a9e6d0c89abe5c87b75d424b5d4c6ad9e673aec89b28
-
SSDEEP
12288:brwMz6qwEW6I7icWJE/czSHx2wIY/Q1KGgDU2sa7pkxIPnUsBxKNAndWXrGX0:wMwEWr7Cm/czQxJGgDea7pk2nUWKNNyE
Malware Config
Signatures
Files
-
a9c3940f167e232dc4619f922dfe7f71327a138621e42085059222bf723772d4.exe windows x86
d4ff4e9520d2b9d618be12fecec0c0ac
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcatA
LoadResource
SizeofResource
FindResourceA
CloseHandle
WriteFile
CreateFileA
GetTempFileNameA
DeleteFileA
Sleep
GetExitCodeProcess
WaitForSingleObject
CreateProcessA
GetStartupInfoA
LockResource
lstrcpyA
GetCommandLineA
FreeLibrary
GetProcAddress
LoadLibraryA
GetWindowsDirectoryA
GetModuleFileNameA
lz32
LZCopy
LZOpenFileA
LZClose
user32
MessageBoxA
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 687KB - Virtual size: 686KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ