Static task
static1
Behavioral task
behavioral1
Sample
9ebf7c0356c66393c9fd15236a36e4761691743b9541b12c2d2c24116422a359.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9ebf7c0356c66393c9fd15236a36e4761691743b9541b12c2d2c24116422a359.exe
Resource
win10v2004-20220812-en
General
-
Target
9ebf7c0356c66393c9fd15236a36e4761691743b9541b12c2d2c24116422a359
-
Size
235KB
-
MD5
e496a98f22d329e4899a972631f0ccc8
-
SHA1
55ef6f2a5c0dc020d4317da320612299964362f0
-
SHA256
9ebf7c0356c66393c9fd15236a36e4761691743b9541b12c2d2c24116422a359
-
SHA512
4633461074ffe34bce320b3c83a660fe8d3d002018035869239b0fccfe47e4673b433bcb722d3cc37d61f60cde98ea380a2a757ded825c96dd71726d6949c57a
-
SSDEEP
6144:2FuUBG+RlnfC/1JC5twkmrlWYLwVAqFoJ2QhU:2FuU9Bf+nPIswVeJLU
Malware Config
Signatures
Files
-
9ebf7c0356c66393c9fd15236a36e4761691743b9541b12c2d2c24116422a359.exe windows x86
3d05135032f86cc84003861744e4f532
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapAlloc
GetProcessHeap
HeapFree
CloseHandle
CreateFileW
VirtualAlloc
GetProcAddress
LoadLibraryW
GetModuleHandleA
GetCurrentProcess
CreateFileMappingW
GetLastError
MapViewOfFile
UnmapViewOfFile
GetModuleFileNameW
Sections
.text Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 560B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xcpad Size: - Virtual size: 140KB
.idata Size: 512B - Virtual size: 496B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 412B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ