Static task
static1
Behavioral task
behavioral1
Sample
9d7cbd658c800523ba67d5547596097be4fb179e5b10fafa3f78c6f977a429ac.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9d7cbd658c800523ba67d5547596097be4fb179e5b10fafa3f78c6f977a429ac.exe
Resource
win10v2004-20220812-en
General
-
Target
9d7cbd658c800523ba67d5547596097be4fb179e5b10fafa3f78c6f977a429ac
-
Size
1.8MB
-
MD5
4f975ad9fb68cc4b86cce158dfd195fd
-
SHA1
d92d1244e7a1f61923efcbb6ccfafd09303464e9
-
SHA256
9d7cbd658c800523ba67d5547596097be4fb179e5b10fafa3f78c6f977a429ac
-
SHA512
0ade529e0fc142b4109d978b8d9d5171bfcf4bd1f3661272d7e94a62cec6392bef931ae3ee370e4aaf1aa837553c0df535a3e62b77e17bcc521b4805dc6e347b
-
SSDEEP
24576:eBfJc9q0Q0SkzQWTGPPy3jQkDgJbcS/x98iVYCSbhG8jRk6s3jCPsNXM7UNtl6K:WVx0mWT9AJWiz8NszDB
Malware Config
Signatures
Files
-
9d7cbd658c800523ba67d5547596097be4fb179e5b10fafa3f78c6f977a429ac.exe windows x86
cd6132b382918508e14373fa283602bb
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitThread
DeleteFileA
GetCommandLineA
GetFileTime
DeleteFileW
GetLastError
CopyFileExA
GetConsoleMode
CreateDirectoryA
FindAtomA
GlobalFree
FindFirstFileA
CopyFileA
CopyFileExA
CopyFileW
CopyFileA
DeleteFileA
OpenFileMappingA
Sleep
FindFirstFileA
GetConsoleMode
CreateDirectoryA
CreateProcessA
GetCPInfo
ExitThread
GlobalFree
ReadConsoleA
DeleteFileW
OpenFile
GetLastError
ReadConsoleW
CopyFileExW
OpenFileMappingA
CopyFileA
CreateThread
GetConsoleMode
GetCommandLineA
GetFileSize
ReadFile
CopyFileExW
GetStdHandle
GetLastError
GetCPInfo
CopyFileExA
DeleteAtom
CopyFileW
OpenFile
CreateDirectoryA
GetCPInfo
CopyFileW
ReadConsoleW
CreateThread
WriteFile
GetCommandLineA
DeleteAtom
OpenFileMappingA
ReadConsoleA
GetConsoleMode
GetFileTime
CopyFileExW
FindFirstFileA
ExitThread
GetComputerNameA
DeleteFileW
GlobalFree
GetStdHandle
OpenFileMappingA
FindAtomA
ExitThread
GlobalFree
DeleteFileW
GetCPInfo
ReadConsoleA
CreateDirectoryA
DeleteFileA
CopyFileW
CreateProcessA
GetConsoleMode
FindFirstFileA
GetFileSize
WriteFile
CopyFileA
CopyFileExW
GetStdHandle
ReadConsoleW
ReadConsoleA
GetConsoleMode
DeleteFileW
ExitThread
OpenFile
DeleteFileA
WriteFile
GetCPInfo
GetFileSize
GetCommandLineA
ReadConsoleW
CreateDirectoryA
ReadFile
CopyFileExW
CopyFileExA
Sections
.init Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 24KB - Virtual size: 2.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: 4KB - Virtual size: 82B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ