Static task
static1
Behavioral task
behavioral1
Sample
9db67aff89e754098befb0610b909fe4d80d939eb6a6e0d90afb11870f04f103.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
9db67aff89e754098befb0610b909fe4d80d939eb6a6e0d90afb11870f04f103.exe
Resource
win10v2004-20221111-en
General
-
Target
9db67aff89e754098befb0610b909fe4d80d939eb6a6e0d90afb11870f04f103
-
Size
118KB
-
MD5
2e4978b633de103215f58e03e6a252f0
-
SHA1
e3b808f94666ac4d5a37762c65b8f4893259a1af
-
SHA256
9db67aff89e754098befb0610b909fe4d80d939eb6a6e0d90afb11870f04f103
-
SHA512
429e5c0831d65eca15beda06f73b3e6eca58e2cbcb2e4f26f956981b228b31be7a1d490f6bf7c2b31573210a1318afc776297b7005952a31499dd1afc072673d
-
SSDEEP
3072:kLWTEiR+gctabvQuKbtG3ftk3j30lQqAB1kO0exnr:kLWiYTQPG3VQya6O0
Malware Config
Signatures
Files
-
9db67aff89e754098befb0610b909fe4d80d939eb6a6e0d90afb11870f04f103.exe windows x86
4a413fe292cea07ed2f1245dbd370a80
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ExitProcess
GetLastError
GetTickCount
GetFileSize
CreateFileW
GetModuleFileNameW
GlobalAlloc
GetModuleHandleW
GetStartupInfoW
SetUnhandledExceptionFilter
Sleep
GetProcAddress
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapCreate
VirtualFree
HeapFree
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
LoadLibraryA
InitializeCriticalSectionAndSpinCount
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapAlloc
VirtualAlloc
HeapReAlloc
RtlUnwind
HeapSize
GetLocaleInfoA
WideCharToMultiByte
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
LCMapStringW
user32
RegisterClassExW
CreateCursor
Sections
.text Size: 25KB - Virtual size: 24KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.opm Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 81KB - Virtual size: 81KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ