Static task
static1
Behavioral task
behavioral1
Sample
9b34a55b6e10ccb05d24bed6cf46ff87b20211fe05afac96ca5521f681cb44c9.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9b34a55b6e10ccb05d24bed6cf46ff87b20211fe05afac96ca5521f681cb44c9.exe
Resource
win10v2004-20221111-en
General
-
Target
9b34a55b6e10ccb05d24bed6cf46ff87b20211fe05afac96ca5521f681cb44c9
-
Size
276KB
-
MD5
41f5b7fd15253e92a7861717860116f4
-
SHA1
50bbb1c03733d9befa66a3615b5df04a0bdf57a6
-
SHA256
9b34a55b6e10ccb05d24bed6cf46ff87b20211fe05afac96ca5521f681cb44c9
-
SHA512
c6ec0b5bd4a21c84e656c563a89256441ea01583fd5a48f1fe5dbb7ab3413bff620fd0415e65c2e6e20268f99816508f47d4de810df1b36a010be0bcf23cb623
-
SSDEEP
6144:ofYX5GEQgiqGe5DthPpOjVP/Hqi0YMrRX9ZjAQhxaeycesmrEltLVnVkL:kk5bQwx5JF0VnZIrR9ZEQhxaeyNDgrVC
Malware Config
Signatures
Files
-
9b34a55b6e10ccb05d24bed6cf46ff87b20211fe05afac96ca5521f681cb44c9.exe windows x86
97d0062ee40a69dd10a087b00adfa66d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
InitializeCriticalSection
GetProcAddress
LocalFree
RaiseException
LocalAlloc
GetModuleHandleA
LeaveCriticalSection
EnterCriticalSection
DuplicateHandle
GetShortPathNameA
ResumeThread
WriteProcessMemory
GetPrivateProfileSectionA
GetStringTypeA
LCMapStringW
LCMapStringA
RtlUnwind
WideCharToMultiByte
MultiByteToWideChar
GetStringTypeW
user32
DefWindowProcA
AdjustWindowRectEx
Sections
0 Size: 204KB - Virtual size: 879KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
1 Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
2 Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
3 Size: 48KB - Virtual size: 71KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
4 Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
5 Size: 8KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE