Static task
static1
Behavioral task
behavioral1
Sample
d9cbc0de0cd759f858fe3a01f2eeb782e1cdc0af8630135b2db161f261779f51.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
d9cbc0de0cd759f858fe3a01f2eeb782e1cdc0af8630135b2db161f261779f51.exe
Resource
win10v2004-20220901-en
General
-
Target
d9cbc0de0cd759f858fe3a01f2eeb782e1cdc0af8630135b2db161f261779f51
-
Size
30KB
-
MD5
9463f7c5a8ab70e691747b3a1fb64e98
-
SHA1
7603e148e27a7c4f65c6aee34481c00d01acd7bf
-
SHA256
d9cbc0de0cd759f858fe3a01f2eeb782e1cdc0af8630135b2db161f261779f51
-
SHA512
16c0ac3eec314e6ea572800d66540c405dfa393dc486097d82a0c47984602a5b416bd98229926c75b8275914402dea88c2b56237333723a6339be058f9327a6c
-
SSDEEP
384:VdHtjzNywncQGPnVsrAMDaV+TmWY6w+h/K6Gy+4YUdxglNKwvRXoLqGQAlBia1yQ:Vdt3nnG/81TmWvJhC6c9UI4uQAOycVl
Malware Config
Signatures
Files
-
d9cbc0de0cd759f858fe3a01f2eeb782e1cdc0af8630135b2db161f261779f51.exe windows x86
d2305b40d4de44e54a911544ada43cab
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineA
ExitProcess
GetStartupInfoA
FileTimeToDosDateTime
lstrcat
GetProcessAffinityMask
TlsSetValue
MultiByteToWideChar
RegisterConsoleOS2
TlsGetValue
CreatePipe
SetVolumeLabelW
LocalCompact
GetThreadTimes
ReadProcessMemory
SetHandleCount
VDMConsoleOperation
BeginUpdateResourceA
FindNextFileW
RegisterConsoleOS2
GetProcessVersion
FindCloseChangeNotification
InitAtomTable
FileTimeToLocalFileTime
LocalFileTimeToFileTime
EndUpdateResourceW
HeapSize
FindNextVolumeMountPointA
CopyFileExA
GlobalLock
GlobalCompact
VirtualLock
WriteConsoleW
UnmapViewOfFile
AddAtomA
GetCurrentProcess
GetTapeStatus
CallNamedPipeW
PrivCopyFileExW
FindFirstFileW
Thread32Next
ReadConsoleOutputW
GetProfileSectionW
Sections
code Size: 4KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
data Size: 22KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 408B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ