Static task
static1
Behavioral task
behavioral1
Sample
9846c346399964cdb57dbabdc7751aa5f117c8049d0a618221e096a722f2ddec.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
9846c346399964cdb57dbabdc7751aa5f117c8049d0a618221e096a722f2ddec.exe
Resource
win10v2004-20220812-en
General
-
Target
9846c346399964cdb57dbabdc7751aa5f117c8049d0a618221e096a722f2ddec
-
Size
123KB
-
MD5
e39baf96607c01578d1ca877dd801deb
-
SHA1
0e80e1c9e02df8be4848b648a348e473c027aa96
-
SHA256
9846c346399964cdb57dbabdc7751aa5f117c8049d0a618221e096a722f2ddec
-
SHA512
c89eb8010e2b66f5fba6a947f698b854bb59a1b6cfa97dfe230535a69bfe8270c4905028f2ea6334330214f73fdf22e39aebb8555baf3ef612804dd001b5002c
-
SSDEEP
3072:zpDzgxMhevZuU/5mQxZ5xHFQKOljixNenTn2t+:NzgmhevL/4QJxHGKOo0n6
Malware Config
Signatures
Files
-
9846c346399964cdb57dbabdc7751aa5f117c8049d0a618221e096a722f2ddec.exe windows x86
9b9aba24de30262e10fd7b87222e94e7
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetVersionExA
SleepEx
CreateThread
ExitProcess
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsProcessorFeaturePresent
GetCurrentProcess
Sleep
GetTickCount
GlobalAlloc
GlobalLock
CreateFileA
WriteFile
GlobalUnlock
GlobalFree
RtlUnwind
CloseHandle
TerminateProcess
user32
GetDC
GetClientRect
GetSystemMetrics
ReleaseDC
MessageBoxA
gdi32
SetStretchBltMode
StretchBlt
CreateCompatibleBitmap
SelectObject
BitBlt
GetObjectA
GetDIBits
DeleteObject
CreateCompatibleDC
Sections
.text Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 852B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 112KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 468B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ