Static task
static1
Behavioral task
behavioral1
Sample
9f82a5f0db21e4b09cb58fdad9b3e7d1b745c354597ee477788227ffd3b56bbd.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9f82a5f0db21e4b09cb58fdad9b3e7d1b745c354597ee477788227ffd3b56bbd.exe
Resource
win10v2004-20220812-en
General
-
Target
9f82a5f0db21e4b09cb58fdad9b3e7d1b745c354597ee477788227ffd3b56bbd
-
Size
274KB
-
MD5
8eb1fbc360057068bcdebaa3857c18b3
-
SHA1
e5c15278865a3ffc1d857b0a2b770f8b4c58e2cf
-
SHA256
9f82a5f0db21e4b09cb58fdad9b3e7d1b745c354597ee477788227ffd3b56bbd
-
SHA512
840878f154a5d943dada837287648d07add837e535b1f354e9c4be23cb844d551dc16c53367465704afacea80fb165daecf1837dc2afb83c4cd9c493abd9b4aa
-
SSDEEP
6144:tw1MFZpc8aRSaShZOhoQaqf+9uNLmkei559:e1MF7c8aRSyuKf+09ms
Malware Config
Signatures
Files
-
9f82a5f0db21e4b09cb58fdad9b3e7d1b745c354597ee477788227ffd3b56bbd.exe windows x86
812236ce4991da7c854ae7f8d8e6726c
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CloseHandle
CreateEventA
CreateThread
EnterCriticalSection
ExitProcess
ExitThread
FindClose
GetComputerNameA
GetFileSize
GetLocalTime
GetPrivateProfileStringA
GetTickCount
GetVersionExA
GlobalAlloc
GlobalFree
GlobalLock
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
SetCurrentDirectoryA
SetEvent
Sleep
WaitForSingleObject
WriteConsoleA
lstrcmpiA
lstrlenA
user32
DeleteMenu
DispatchMessageW
GetScrollInfo
GetWindowPlacement
LoadIconW
SetMenuDefaultItem
SetWindowRgn
TranslateAcceleratorW
Sections
.text Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 956B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 260KB - Virtual size: 262KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ