Static task
static1
Behavioral task
behavioral1
Sample
9074e7184b6c5082709edc2b6cf820a101671a8e69a10d832e77a2345b35509e.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
9074e7184b6c5082709edc2b6cf820a101671a8e69a10d832e77a2345b35509e.exe
Resource
win10v2004-20221111-en
General
-
Target
9074e7184b6c5082709edc2b6cf820a101671a8e69a10d832e77a2345b35509e
-
Size
31KB
-
MD5
3cd38be99450cdfb551b7bf92b168313
-
SHA1
8d2feb305a8ec330b301f79cc881a417029444ae
-
SHA256
9074e7184b6c5082709edc2b6cf820a101671a8e69a10d832e77a2345b35509e
-
SHA512
03431397c8bb1fd161b0f579c3b8f3b3787736110fffa8e1e44c3f1189089cd6580d4a5a3debe6844865e0af2b9ae9c8c09f9160cd222f4602432785db525f9b
-
SSDEEP
384:/u7Eer++zW0c0kt4H4CKnjsklAIPr34Lse4:/u7E2hi4m4HL33IM4e4
Malware Config
Signatures
Files
-
9074e7184b6c5082709edc2b6cf820a101671a8e69a10d832e77a2345b35509e.exe windows x86
ea72777c8f8dbf69cbadc6b79a84f74a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
AddAtomA
DeleteFileA
ExitProcess
FindAtomA
FindClose
FindFirstFileA
FindNextFileA
GetAtomNameA
GetCommandLineA
GetLocalTime
GetModuleFileNameA
GetModuleHandleA
GetStartupInfoA
GetWindowsDirectoryA
SetFileAttributesA
SetUnhandledExceptionFilter
Sleep
msvcrt
__getmainargs
__p__environ
__p__fmode
__set_app_type
_cexit
_iob
_onexit
_setmode
abort
atexit
atol
exit
fclose
fflush
fopen
fprintf
fread
free
malloc
memset
signal
sprintf
strcat
strcpy
strlen
user32
CallNextHookEx
DispatchMessageA
GetForegroundWindow
GetKeyState
GetMessageA
GetWindowTextA
KillTimer
SetTimer
SetWindowsHookExA
UnhookWindowsHookEx
wininet
FtpCreateDirectoryA
FtpPutFileA
InternetCloseHandle
InternetConnectA
InternetOpenA
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 64B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 688B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 3KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE