Static task
static1
Behavioral task
behavioral1
Sample
9c54eb2edc711ed26485917373a7799018b584cf70442284c15e5aa1a844f144.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
9c54eb2edc711ed26485917373a7799018b584cf70442284c15e5aa1a844f144.exe
Resource
win10v2004-20221111-en
General
-
Target
9c54eb2edc711ed26485917373a7799018b584cf70442284c15e5aa1a844f144
-
Size
19KB
-
MD5
4201480a8b7ce43e437def4e39c46822
-
SHA1
8b92ce638fd41ac33963c9f4f337d3c352d9cd64
-
SHA256
9c54eb2edc711ed26485917373a7799018b584cf70442284c15e5aa1a844f144
-
SHA512
89d3d34bad99a3af879ae3f4ac67ddb3faa4140cff008da4d92dfa2555c102d325ff0fffa4cd31f8183f4c6035c78a8c373c3b02e874eba49c56ef2b90de611f
-
SSDEEP
384:DPvQxjVZ/j6cmMH6BFINxMMlsR/E69s+FCsTLXzs6XBVYSrO1/:DAbZ/j6cm4yIN8o+FzTLXzhI//
Malware Config
Signatures
Files
-
9c54eb2edc711ed26485917373a7799018b584cf70442284c15e5aa1a844f144.exe windows x86
9897278ecd4c024ef30585c21413f97d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
StrToIntA
kernel32
FormatMessageA
SetUnhandledExceptionFilter
GetLastError
GetFileSize
GetVersionExA
CloseHandle
GetCurrentThreadId
DuplicateHandle
FindNextFileA
GetSystemTime
FindFirstFileA
CreateFileA
GetLocalTime
GetSystemDirectoryA
DeleteFileA
DisableThreadLibraryCalls
GetTimeZoneInformation
GetFullPathNameA
FindClose
lstrcmpiA
InterlockedCompareExchange
GetTickCount
IsBadWritePtr
ExitProcess
LocalFree
IsDebuggerPresent
ReadFile
VirtualAlloc
GetModuleHandleA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
user32
MessageBoxA
GetMessageA
TranslateMessage
wsprintfA
ole32
CoTaskMemFree
CoInitialize
CoTaskMemAlloc
CoUninitialize
oleaut32
VariantInit
VariantClear
VariantCopy
VarUI4FromStr
VariantChangeType
Sections
.text Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ