Static task
static1
Behavioral task
behavioral1
Sample
c9d89b5537bd8e7327986edac512f933383bfdab1c9e1e200d1ea28c54126f68.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
c9d89b5537bd8e7327986edac512f933383bfdab1c9e1e200d1ea28c54126f68.exe
Resource
win10v2004-20220901-en
General
-
Target
c9d89b5537bd8e7327986edac512f933383bfdab1c9e1e200d1ea28c54126f68
-
Size
105KB
-
MD5
03e97cc797565d24ed7afd3af1738a3c
-
SHA1
6d5c0948f0031c60546be10de9582bcb3bdd49c2
-
SHA256
c9d89b5537bd8e7327986edac512f933383bfdab1c9e1e200d1ea28c54126f68
-
SHA512
184e67929667ef0c1d20a0d5eb6c3875615d06a216b4da1336670c09ab6e6917e25d6e5881dd781120c7f15340d9fe0918094f4520392e2ed3e07f2bda5a7880
-
SSDEEP
1536:A8sZdpZdslGOaQfK4hvtvxtydqFUuxw22SA+ftUlnKS78:FsZdRsgO52dMFfBfqQ
Malware Config
Signatures
Files
-
c9d89b5537bd8e7327986edac512f933383bfdab1c9e1e200d1ea28c54126f68.exe windows x86
82a8f62e20212192cf7ec17aacf6a041
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleW
LoadResource
RtlMoveMemory
DeleteFileW
VirtualProtect
GetExitCodeProcess
GetLastError
GetModuleHandleA
VirtualQuery
GlobalLock
EnumCalendarInfoA
SizeofResource
GetCurrentThread
GetProcAddress
lstrcpyA
GetTempPathA
GetACP
GetThreadLocale
RtlUnwind
GetVersion
GetSystemTimeAsFileTime
FileTimeToLocalFileTime
DeleteFileA
GetTempPathW
CompareStringA
msvcrt
_adjust_fdiv
__set_app_type
__p__commode
_exit
_initterm
_controlfp
_XcptFilter
__p__fmode
__p___initenv
tan
_except_handler3
__getmainargs
Sections
.text Size: 1024B - Virtual size: 578B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 33KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Giti Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 100B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ