Static task
static1
Behavioral task
behavioral1
Sample
9d428eb96b240ee76d816f66351c96a9dd28d848dbe917b4f04613da944ee674.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9d428eb96b240ee76d816f66351c96a9dd28d848dbe917b4f04613da944ee674.exe
Resource
win10v2004-20220812-en
General
-
Target
9d428eb96b240ee76d816f66351c96a9dd28d848dbe917b4f04613da944ee674
-
Size
17KB
-
MD5
b5db02b73c6cf3c3c65f8092bcfdeb00
-
SHA1
57b08be346ea206e8c723d86b823612827993214
-
SHA256
9d428eb96b240ee76d816f66351c96a9dd28d848dbe917b4f04613da944ee674
-
SHA512
936414ade85b223ffd37f649a67f82bb6ecacae2a133db389aad889bbff402ff41bb186fd83761e2df8821579f3e1c42007c82feb68b138d478e058d5a6a2a21
-
SSDEEP
192:69AurG72JbngWYc+XQQgN1jr3zlaa+ZnmKhQZdJwz9J5RnrlhgmWhzssxJ7wLS:kAuqUnL0gNVrInmNJwz9J5RnphED7w
Malware Config
Signatures
Files
-
9d428eb96b240ee76d816f66351c96a9dd28d848dbe917b4f04613da944ee674.exe windows x86
0b49b7385cf5967948108da772dfa7b9
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapReAlloc
VirtualProtect
InterlockedExchange
CompareFileTime
GetConsoleCP
lstrlenA
GlobalUnlock
WaitForSingleObject
SuspendThread
GetCommandLineA
GetTickCount
LocalSize
LoadLibraryExA
WaitForMultipleObjects
GetAtomNameA
GetSystemDefaultLangID
CloseHandle
GetStdHandle
GetVersion
GetModuleHandleA
HeapCreate
gdi32
GetTextColor
Ellipse
BeginPath
EngLineTo
DeleteObject
CreateICA
GetRgnBox
CreatePalette
DeleteDC
Escape
GetFontData
GetStringBitmapA
AbortPath
GetMetaRgn
EqualRgn
FloodFill
EndPath
CreateFontA
GetMetaFileA
winmm
auxSetVolume
CloseDriver
PlaySoundA
OpenDriver
auxGetVolume
secur32
AddCredentialsA
Sections
.text Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ