Static task
static1
Behavioral task
behavioral1
Sample
9b2a7077f5acc74ba21feba6c1a874a40efb5f3e794ca360d3783a0c76f6857f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9b2a7077f5acc74ba21feba6c1a874a40efb5f3e794ca360d3783a0c76f6857f.exe
Resource
win10v2004-20220812-en
General
-
Target
9b2a7077f5acc74ba21feba6c1a874a40efb5f3e794ca360d3783a0c76f6857f
-
Size
363KB
-
MD5
5c4dde820df550d87c495e05e14f022b
-
SHA1
4c5fc9fd4d18e4a0cfecffbfec893538aa5bf65d
-
SHA256
9b2a7077f5acc74ba21feba6c1a874a40efb5f3e794ca360d3783a0c76f6857f
-
SHA512
1d8954ba4b6493d08a1088ccebceb8a67a97c27a716ec66b9d64817ea73e1e46748cafb98e57ec70c4ef704d32cf62177e698be37d5b570d862dc8a38ee75a87
-
SSDEEP
6144:pX4oFUqpSWE6Q52nvZpaOjzm9Th0H086LjJoxGq6IEZy7k5:pX4oFxR4Ev/jz+Thy4FYGq6B5
Malware Config
Signatures
Files
-
9b2a7077f5acc74ba21feba6c1a874a40efb5f3e794ca360d3783a0c76f6857f.exe windows x86
4582ffdd7eb98cb63a937096204182b7
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_AGGRESIVE_WS_TRIM
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_SYSTEM
Imports
kernel32
HeapAlloc
GetProcessHeap
HeapFree
GetTickCount
GetModuleFileNameW
GetCurrentProcessId
OpenFileMappingW
GetLastError
MapViewOfFile
CloseHandle
CreateFileW
CreateFileMappingW
UnmapViewOfFile
GetFileInformationByHandle
VirtualAlloc
VirtualFree
GetModuleHandleA
GetProcAddress
LoadLibraryW
Sections
.text Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.xcpad Size: - Virtual size: 128KB
.idata Size: 1024B - Virtual size: 626B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 420B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ