Static task
static1
Behavioral task
behavioral1
Sample
9e4fd8c05e56982b938b552cd1485d0f419a85ae9417d780beff24382455b26b.exe
Resource
win7-20220812-en
General
-
Target
9e4fd8c05e56982b938b552cd1485d0f419a85ae9417d780beff24382455b26b
-
Size
109KB
-
MD5
6c18db06f17dd38a64a87ee545eb21b6
-
SHA1
099efcab1b440df9de50e1fc7cd80117ac839bc3
-
SHA256
9e4fd8c05e56982b938b552cd1485d0f419a85ae9417d780beff24382455b26b
-
SHA512
d054305b972dfda071c3b38612f5a41976618fce504683b1ade4e3ab74aa3f46b182528a2993edf00ed3afa07f42ca44202c7dc7f5afa9b5a1038d83ad47a7fb
-
SSDEEP
1536:i5HDqcj0SHCE549AQCbShSUk0nbb3dgj0qtonMeOB9nnteNHMS+zpdHi8oJrrrrj:id9yE0CbUSubbSIGonIhYcBo1
Malware Config
Signatures
Files
-
9e4fd8c05e56982b938b552cd1485d0f419a85ae9417d780beff24382455b26b.exe windows x86
41f506587b94e3dd8e59dc02a59fe164
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
SetFileTime
SetFileTime
CloseHandle
GetExitCodeProcess
GetStringTypeA
GetModuleHandleA
LoadLibraryA
GetDiskFreeSpaceA
lstrcpyW
GetFileSize
SetConsoleTitleW
ReadFileEx
InterlockedExchange
LeaveCriticalSection
lstrcatA
CreateEventW
GetLastError
SetFileTime
GetPrivateProfileIntA
ReadConsoleA
HeapCreate
adsldpc
ADsCreateDSObject
ADsCloseSearchHandle
ADsEnumClasses
ADsDeleteDSObject
shell32
ExtractIconA
SHFree
DragQueryFileA
DragAcceptFiles
ShellMessageBoxW
DllUnregisterServer
SHGetDiskFreeSpaceA
SHGetSettings
ShellAboutA
DuplicateIcon
StrChrA
SHGetMalloc
DragFinish
uxtheme
SetWindowTheme
Sections
.text Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 272B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rich Size: 1KB - Virtual size: 176B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ole Size: 512B - Virtual size: 74B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.RSRC Size: 103KB - Virtual size: 102KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ