Static task
static1
Behavioral task
behavioral1
Sample
9614e6ece896acfc2e5b8be6d7b2dfdbd6a13f2c8ecddb5fc6df33a9b4ca36e9.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
9614e6ece896acfc2e5b8be6d7b2dfdbd6a13f2c8ecddb5fc6df33a9b4ca36e9.exe
Resource
win10v2004-20221111-en
General
-
Target
9614e6ece896acfc2e5b8be6d7b2dfdbd6a13f2c8ecddb5fc6df33a9b4ca36e9
-
Size
76KB
-
MD5
8304c9da7916bc5036773a106c02306e
-
SHA1
e9f540d3c24bcf1277df5a02d9f7670cde6470fa
-
SHA256
9614e6ece896acfc2e5b8be6d7b2dfdbd6a13f2c8ecddb5fc6df33a9b4ca36e9
-
SHA512
2085b55205f69d759d526e3a362e70bba7cad08b71744546dd140e72971e30b068bb7e1f27ad44fa5b74cf30852499daf2bd9dea85da9b99a58b5aa9b91aee23
-
SSDEEP
1536:TPfHmJbybwfvvItmb1+Vq7L5mUDhSVrMLgygrfqleMeXg3BKZOQLgTKpZH9l1npe:9jk4VlhgKCMRr2a8WPaM1MXY0isowjmM
Malware Config
Signatures
Files
-
9614e6ece896acfc2e5b8be6d7b2dfdbd6a13f2c8ecddb5fc6df33a9b4ca36e9.exe windows x86
2fa49730af4aaf70aeb8ffd8eb99734b
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
TlsGetValue
CopyFileW
GetModuleHandleA
IsProcessInJob
GlobalMemoryStatusEx
GetConsoleFontInfo
LockFile
RemoveLocalAlternateComputerNameA
GetNumaHighestNodeNumber
SetProcessShutdownParameters
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 64KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rrdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE