Static task
static1
Behavioral task
behavioral1
Sample
9b70cda63e83ff9859341f645be2dcde632f1609f6b078d2c09c82b54e27d9ed.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9b70cda63e83ff9859341f645be2dcde632f1609f6b078d2c09c82b54e27d9ed.exe
Resource
win10v2004-20220901-en
General
-
Target
9b70cda63e83ff9859341f645be2dcde632f1609f6b078d2c09c82b54e27d9ed
-
Size
116KB
-
MD5
2ebb3e675b7602347d7b0e14e6a78439
-
SHA1
d94fd867a2627a5533e04a3747918a568f7f921a
-
SHA256
9b70cda63e83ff9859341f645be2dcde632f1609f6b078d2c09c82b54e27d9ed
-
SHA512
ae3f0b45016a8b1c00816c9d843d380861e49cca98cc5ddd63b9556bb4e79aad90614289d95ce7d1b6d565c466094724697dc92e848dde800cfbe19cefdc781c
-
SSDEEP
1536:IgDuInImTGuAOMnctdShGh3+24ourlu26ndgfiV7KVn4/v0noztA:IgDuIIm6uAFct4Ah3ObkdhE4/koJA
Malware Config
Signatures
Files
-
9b70cda63e83ff9859341f645be2dcde632f1609f6b078d2c09c82b54e27d9ed.exe windows x86
248c60135284c9ef86da46936285c13f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
OpenJobObjectA
GetProcessHeap
GetCurrentConsoleFont
GetCurrentProcess
GetDiskFreeSpaceA
ExitProcess
GetVolumeNameForVolumeMountPointA
ResumeThread
SetupComm
ReadConsoleOutputA
EnumUILanguagesA
GetCommandLineW
VirtualAllocEx
GetPrivateProfileSectionNamesW
user32
LoadBitmapW
SwitchDesktop
IsServerSideWindow
PostMessageA
RegisterSystemThread
GetWindowTextA
EnumWindowStationsA
MonitorFromWindow
EnumDisplaySettingsA
InvalidateRect
EnumPropsA
gdi32
SetBoundsRect
PolyTextOutA
Sections
.text Size: 104KB - Virtual size: 121KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 800B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ