Static task
static1
Behavioral task
behavioral1
Sample
9babf0fa43fc254548d347b98df85c6b9165d2fee51b766347305117ee4055a0.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
9babf0fa43fc254548d347b98df85c6b9165d2fee51b766347305117ee4055a0.exe
Resource
win10v2004-20221111-en
General
-
Target
9babf0fa43fc254548d347b98df85c6b9165d2fee51b766347305117ee4055a0
-
Size
36KB
-
MD5
8e360fa322477d93afd3bde5d23e1618
-
SHA1
b194d8d53c1327bacfd00de20271f96915120598
-
SHA256
9babf0fa43fc254548d347b98df85c6b9165d2fee51b766347305117ee4055a0
-
SHA512
86618df8f8c6fc6e350ee926d19b0dd83cf0cf114d50e2b8aefd158df926572e4a4d462c790d397e190f4d2e23e801845962e8d08c52c670c62756787327bf73
-
SSDEEP
384:xykmWOM656/YQqJmlx7NkDGlgITioS2K3yfu/ZyyJnjWFY0Ao5a8mPrpg:dmWmdQqI7cERioe3yGByEnX0Ao5
Malware Config
Signatures
Files
-
9babf0fa43fc254548d347b98df85c6b9165d2fee51b766347305117ee4055a0.exe windows x86
df1e2a16d785e463a0ed5d20d317bc8a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
WideCharToMultiByte
lstrlenW
GetTickCount
Sleep
OutputDebugStringW
TerminateProcess
CloseHandle
FlushFileBuffers
WriteFile
OutputDebugStringA
GetCurrentThreadId
ExitProcess
CreateThread
CreateMutexW
OpenMutexW
GetStringTypeA
LoadLibraryA
GetProcAddress
GetOEMCP
GetACP
GetCPInfo
SetFilePointer
SetStdHandle
RtlUnwind
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
UnhandledExceptionFilter
GetCurrentProcess
LCMapStringW
LCMapStringA
MultiByteToWideChar
GetLastError
HeapReAlloc
VirtualAlloc
VirtualFree
GetStringTypeW
HeapCreate
HeapDestroy
GetVersion
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
HeapFree
HeapAlloc
user32
DialogBoxParamW
wvsprintfW
DispatchMessageW
TranslateMessage
TranslateAcceleratorW
GetMessageW
LoadAcceleratorsW
LoadStringW
RegisterClassExW
LoadCursorW
LoadIconW
ShowWindow
CreateWindowExW
UpdateWindow
PostQuitMessage
EndDialog
DefWindowProcW
DestroyWindow
EndPaint
BeginPaint
GetClientRect
DrawTextW
ws2_32
gethostbyname
closesocket
select
connect
htons
inet_addr
socket
recv
WSAStartup
setsockopt
send
Sections
.text Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ