Static task
static1
Behavioral task
behavioral1
Sample
9073545bf17c24206a3d55bd6286902581ed86f92b5f2aa8bdcda70aa3ca4f07.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9073545bf17c24206a3d55bd6286902581ed86f92b5f2aa8bdcda70aa3ca4f07.exe
Resource
win10v2004-20220812-en
General
-
Target
9073545bf17c24206a3d55bd6286902581ed86f92b5f2aa8bdcda70aa3ca4f07
-
Size
363KB
-
MD5
cb824044d1caa54e55cdba3839e98617
-
SHA1
59c1910dbd9629804fee7e5b7deb0e7803bc5f5e
-
SHA256
9073545bf17c24206a3d55bd6286902581ed86f92b5f2aa8bdcda70aa3ca4f07
-
SHA512
be459126b5dd380f66d4592f33780b583bef61593075c1b9a415ef0f4a49553e75c594c8e0f7ab0d0bed378150a2eb1ad677420cfe808a78beefd70c35271481
-
SSDEEP
6144:3a854NgQwVsrvPSBHGeytGh0bgFfzDfpVdQbm1z4KVny1sRsjV7J1oyhuCrps:3afOQwCjPS9GJGh+gt/D+bmZynV7mSps
Malware Config
Signatures
Files
-
9073545bf17c24206a3d55bd6286902581ed86f92b5f2aa8bdcda70aa3ca4f07.exe windows x86
83623efc7230dd4cf706e4c6638fdbe2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
EnumResourceTypesA
DeleteCriticalSection
FindClose
GetModuleHandleA
GetLastError
FreeConsole
LoadLibraryExW
GetComputerNameA
GetDriveTypeA
TlsGetValue
CreateMutexA
Sleep
GetTickCount
ReleaseMutex
GetCommandLineA
VirtualProtect
SetLastError
GetDiskFreeSpaceExW
CloseHandle
GetExitCodeProcess
shell32
DllUnregisterServer
SHFree
SHGetSettings
SheChangeDirA
SHGetMalloc
DragAcceptFiles
StrChrA
SHGetDiskFreeSpaceA
DragFinish
ShellMessageBoxA
ShellAboutA
DragQueryFileA
SHGetNewLinkInfo
printui
PnPInterface
vQueueCreate
bFolderRefresh
bPrinterSetup
bFolderGetPrinter
user32
MessageBoxA
Sections
.text Size: 1024B - Virtual size: 624B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 522B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ