Static task
static1
Behavioral task
behavioral1
Sample
f9a39e715422424943acb2fb7398919a916fb811ce4d6b68cc702bb5f3106c5b.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
f9a39e715422424943acb2fb7398919a916fb811ce4d6b68cc702bb5f3106c5b.exe
Resource
win10v2004-20220812-en
General
-
Target
f9a39e715422424943acb2fb7398919a916fb811ce4d6b68cc702bb5f3106c5b
-
Size
647KB
-
MD5
918f8c5286edac970be7b7d736332b43
-
SHA1
eafb8eb1af0a8f86ed27803d814a3b429ec683cd
-
SHA256
f9a39e715422424943acb2fb7398919a916fb811ce4d6b68cc702bb5f3106c5b
-
SHA512
069e5dcf71817a4b48d33771d7ac72d4c3bf61a1f5a5388562526e8ed37bdf2dbba77a38c3cce6eab65d5140a57ec40a1bf68f3a239375e46ae888a604cd8f56
-
SSDEEP
12288:WSdS+7lQLTL1sFl3XmfIaEFQ3q1HFjwoh0z0bSCX96A:j3lQLH1eFQa1lXhuASC
Malware Config
Signatures
Files
-
f9a39e715422424943acb2fb7398919a916fb811ce4d6b68cc702bb5f3106c5b.exe windows x86
32ca8d5fca836efa8536566f0eee05c5
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetProcAddress
GetModuleHandleA
LoadLibraryA
ExitProcess
CreateThread
VirtualAlloc
VirtualFree
ExitThread
GetSystemDirectoryA
CreateFileA
WriteFile
CloseHandle
FreeLibrary
GetFileTime
CompareFileTime
GetModuleFileNameA
GetCommandLineA
Sections
BitArts Size: 168KB - Virtual size: 156KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BitArts Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BitArts Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BitArts Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
BitArts Size: 430KB - Virtual size: 432KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE