Static task
static1
Behavioral task
behavioral1
Sample
9466863a2080270f3606de1536c04f6a8816d0d4e60516b97abfa4935f42d339.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
9466863a2080270f3606de1536c04f6a8816d0d4e60516b97abfa4935f42d339.exe
Resource
win10v2004-20220812-en
General
-
Target
9466863a2080270f3606de1536c04f6a8816d0d4e60516b97abfa4935f42d339
-
Size
316KB
-
MD5
d3baebf6d5e5663a1d5fee71e1359fe2
-
SHA1
8fa128fbca82dabaf3b9ad1a40f2561ad63dec1a
-
SHA256
9466863a2080270f3606de1536c04f6a8816d0d4e60516b97abfa4935f42d339
-
SHA512
768611c6016028a9baa0a6d9ece87c40fa63e79ef1582edee5f426c027fbb749ccfc56b54eed638aed2e12a6e4862e5c8d1904a3c26ff6154b65f4edc057cbe4
-
SSDEEP
6144:S9gUzVP6rNX+ZAQEqjbEY2L/iSiumcZrSf5G8LUu9d:Egl5XGFgaDufZmfZH9d
Malware Config
Signatures
Files
-
9466863a2080270f3606de1536c04f6a8816d0d4e60516b97abfa4935f42d339.exe windows x86
82cb3864c40642e6a326f4bdc13a9507
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WriteConsoleA
GetCurrentThread
GetModuleHandleA
FlushFileBuffers
GetStdHandle
GetTimeFormatA
GetCurrentProcessId
DeleteAtom
GetExpandedNameA
LoadLibraryA
GetThreadPriority
GetACP
InterlockedExchange
FormatMessageA
GetEnvironmentStringsA
HeapCreate
HeapDestroy
VirtualProtect
IsDebuggerPresent
OpenSemaphoreA
GetCurrentProcess
user32
FillRect
FrameRect
IsIconic
DrawTextA
ShowWindow
SetActiveWindow
ReleaseDC
SetForegroundWindow
GetFocus
GetDlgItem
BeginPaint
GetWindow
GetClassNameA
ValidateRgn
GetWindowTextLengthA
EndPaint
GetCursorPos
wsprintfA
GetParent
advapi32
RegEnumKeyA
RegCloseKey
RegFlushKey
RegQueryInfoKeyA
RegCreateKeyA
uxtheme
GetThemeSysFont
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 708KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ