Static task
static1
Behavioral task
behavioral1
Sample
9485855c6bb996a09d149e826cded23b4b98bb76a80b9af571483ceaeea46ee9.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
9485855c6bb996a09d149e826cded23b4b98bb76a80b9af571483ceaeea46ee9.exe
Resource
win10v2004-20220812-en
General
-
Target
9485855c6bb996a09d149e826cded23b4b98bb76a80b9af571483ceaeea46ee9
-
Size
313KB
-
MD5
f6290d474b4726ef0ff00a9a5e76ef2f
-
SHA1
1bf95f6fdac0b0336f8b5ba94c35e1f77237f4fc
-
SHA256
9485855c6bb996a09d149e826cded23b4b98bb76a80b9af571483ceaeea46ee9
-
SHA512
1cd4cf8bddf8fc9bdd270b1979e43a69535639d96f4d6d8ccbe2a0d324385036c65b63cc193f282e0ab7f99ba97b4de8210f7d57145bebc5b4985a951b691fcb
-
SSDEEP
6144:8ItMBWnBNT4dvCgLwd+lIPW7IIEAEphWEccresP0AVk6EF2oWF:8oB54DwYlVovt/8AVkhFpW
Malware Config
Signatures
Files
-
9485855c6bb996a09d149e826cded23b4b98bb76a80b9af571483ceaeea46ee9.exe windows x86
c4341d7711e7b801c6d749bac8d5f279
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
TerminateThread
GetLastError
FileTimeToLocalFileTime
CloseHandle
VirtualFree
GetProcAddress
CreateFileA
GetSystemDirectoryA
GetProcessHeap
GetModuleHandleA
GetFileSize
VirtualAlloc
user32
MoveWindow
netapi32
NetDfsRemoveFtRootForced
avifil32
AVISaveOptions
AVISaveOptionsFree
Sections
.text Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 92KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 64B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 208KB - Virtual size: 647KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.xvda Size: 512B - Virtual size: 336B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.relc Size: 512B - Virtual size: 336B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE