Static task
static1
Behavioral task
behavioral1
Sample
9681e72f85968353d09bec095f90b67fdf8b79d4615dbb042893d8bf38d97e63.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
9681e72f85968353d09bec095f90b67fdf8b79d4615dbb042893d8bf38d97e63.exe
Resource
win10v2004-20220812-en
General
-
Target
9681e72f85968353d09bec095f90b67fdf8b79d4615dbb042893d8bf38d97e63
-
Size
168KB
-
MD5
83c9d2a15dc0ec963385d3b2dfa72e6b
-
SHA1
d4fb4ea74e4256894c2c935d0e8b4c393fa46183
-
SHA256
9681e72f85968353d09bec095f90b67fdf8b79d4615dbb042893d8bf38d97e63
-
SHA512
253ac82574645d506c90e691b5817e9f78904d70c54d51e02d4dca22002c8247fdb9a5110719cecb070ce34c132357540e9f6da9403ebd4f878547130e9cfca6
-
SSDEEP
3072:Ug1AFkoGT+EWAAUnxPYekzIzH1kTLJaQWjfwn3O54x:11A+FXxLxPXkzIzHW/ALw3U4x
Malware Config
Signatures
Files
-
9681e72f85968353d09bec095f90b67fdf8b79d4615dbb042893d8bf38d97e63.exe windows x86
05bfe4dad8dc647b8da258c64ac5076e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetModuleHandleA
VirtualProtect
GetProcAddress
HeapCreate
HeapDestroy
HeapFree
HeapAlloc
RtlUnwind
LCMapStringA
ExitProcess
CloseHandle
CreateFileA
LoadLibraryA
GetCurrentProcess
user32
wsprintfA
CreateWindowExA
SetWindowLongA
CloseWindow
CharLowerBuffA
advapi32
RegCreateKeyA
RegDeleteValueA
RegDeleteKeyA
RegQueryValueA
RegSetValueA
RegOpenKeyA
RegCloseKey
RegEnumValueA
RegEnumKeyA
Sections
.text Size: 150KB - Virtual size: 152KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ