Static task
static1
Behavioral task
behavioral1
Sample
d9b201b36e8704f1c7f6f8635671d9bcf4ef5fe0b0499026236dfec2830ed8d4.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
d9b201b36e8704f1c7f6f8635671d9bcf4ef5fe0b0499026236dfec2830ed8d4.exe
Resource
win10v2004-20220812-en
General
-
Target
d9b201b36e8704f1c7f6f8635671d9bcf4ef5fe0b0499026236dfec2830ed8d4
-
Size
1.3MB
-
MD5
e7ee6a13c9acaca3adeb02a34110e58b
-
SHA1
2a589f2a71938b8d26bf9c328b32c4ca13c8355d
-
SHA256
d9b201b36e8704f1c7f6f8635671d9bcf4ef5fe0b0499026236dfec2830ed8d4
-
SHA512
bf0320943a9f1ac17104a683160abc6e20647b84df90f15fc807cbb21ffb16ae6a91dd59bf75b0b9358f562611b349eee2ec745041741ba6bc3263dff96bcf38
-
SSDEEP
24576:+ZgdHA0DYCb9Mp73xt5GoNc6nipsCx67RLtl59V5ltbWE01jhMr9:a8A8YC+p7hO6nizmtnV5ltH01j69
Malware Config
Signatures
Files
-
d9b201b36e8704f1c7f6f8635671d9bcf4ef5fe0b0499026236dfec2830ed8d4.exe windows x86
f433e7fcc51e68080022754836705744
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
GetModuleHandleA
LoadLibraryA
GetProcAddress
ExitProcess
VirtualAlloc
VirtualFree
user32
MessageBoxA
Sections
.text Size: - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.itext Size: - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 16KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
mt.20mhs Size: - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xpjrtxnj Size: - Virtual size: 76KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 3.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
w6txo6yt Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
qiha.686 Size: - Virtual size: 180KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
agz0zo6x Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE