Static task
static1
Behavioral task
behavioral1
Sample
9749cbb64ec8612e5ddd0ec3dbc3104dd87432e7321f31baecb1918d7b956dc6.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
9749cbb64ec8612e5ddd0ec3dbc3104dd87432e7321f31baecb1918d7b956dc6.exe
Resource
win10v2004-20220812-en
General
-
Target
9749cbb64ec8612e5ddd0ec3dbc3104dd87432e7321f31baecb1918d7b956dc6
-
Size
20KB
-
MD5
fee4c1bed3507a7b9c795270c0ca2680
-
SHA1
c6c38141bfc317e781282e11d7381f905a2caff7
-
SHA256
9749cbb64ec8612e5ddd0ec3dbc3104dd87432e7321f31baecb1918d7b956dc6
-
SHA512
5c8dc6b3ff4cfcaf2faa65999c7cf3ad909dbaf231c9bbab6bea7f9a48471f39c0ddc0583995f79081283055c5d3d834ced29b817aea4755005fa833489860b4
-
SSDEEP
192:roO7XTRnRflKJCtPQYFN5WatIg50wlL1gxSq11bNNvIDs0WJyBjI59ZZXmUwE:EO7XTRnFcLY503dNwMoI59ZZOE
Malware Config
Signatures
Files
-
9749cbb64ec8612e5ddd0ec3dbc3104dd87432e7321f31baecb1918d7b956dc6.exe windows x86
6cd4594e4a61fd421c0468f57a0273a6
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ord497
ord775
ord490
ord374
ord429
ord781
ord766
ord686
ord321
ord461
ord465
ord713
ord714
ord463
ord352
ord395
ord289
ord214
ord271
ord306
ord592
ord704
ord350
ord268
ord276
ord740
ord269
ord323
ord729
ord282
ord361
ord654
ord334
ord397
ord464
user32
ord453
ord614
ord229
ord490
ord231
ord291
gdi32
ord249
comctl32
ord84
Sections
.text Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 823B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 526B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.prdata Size: 2B - Virtual size: 2B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE