Static task
static1
Behavioral task
behavioral1
Sample
9147c71b14abf198e6cd6373052ff39c485807f4000a8bc6746e0c63edccb6c4.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9147c71b14abf198e6cd6373052ff39c485807f4000a8bc6746e0c63edccb6c4.exe
Resource
win10v2004-20221111-en
General
-
Target
9147c71b14abf198e6cd6373052ff39c485807f4000a8bc6746e0c63edccb6c4
-
Size
30KB
-
MD5
56ad97e72c919236bc0807c436ae2d03
-
SHA1
e2488602655ad6392bb05eb8f7230049b5cba228
-
SHA256
9147c71b14abf198e6cd6373052ff39c485807f4000a8bc6746e0c63edccb6c4
-
SHA512
e23974846de13bce408922142e8da6b0fc35dd9f6cade13e1b86747b72a10b2ba5db23a59c52af4219c6d14de3fae7f5223b2142733ab29609dfe840f8c2b3fe
-
SSDEEP
768:HC0CbwX6CldQ6xMp19YeOKfdGDImYFp5vQiF3L:rqCldQK6vQiF3L
Malware Config
Signatures
Files
-
9147c71b14abf198e6cd6373052ff39c485807f4000a8bc6746e0c63edccb6c4.exe windows x86
7345f9497130be252852f565608edfb2
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LoadLibraryA
GetTickCount
GetTempPathA
Sleep
GetCurrentThreadId
ExitProcess
GetProcAddress
CloseHandle
WriteFile
CreateFileA
GetModuleFileNameA
LockResource
SizeofResource
LoadResource
FindResourceA
GetModuleHandleA
user32
PeekMessageA
PostThreadMessageA
wsprintfA
Sections
.text Size: 1024B - Virtual size: 663B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1024B - Virtual size: 670B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ