Static task
static1
Behavioral task
behavioral1
Sample
9fb4f020c694efa2aaf666083378cf5015db70caba118434d88fb8863c68e2eb.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
9fb4f020c694efa2aaf666083378cf5015db70caba118434d88fb8863c68e2eb.exe
Resource
win10v2004-20220812-en
General
-
Target
9fb4f020c694efa2aaf666083378cf5015db70caba118434d88fb8863c68e2eb
-
Size
23KB
-
MD5
0411948e97d90cc18139f7e5fec98da0
-
SHA1
93476fd8ab10a9d4c54faafebc05dd70dc2757de
-
SHA256
9fb4f020c694efa2aaf666083378cf5015db70caba118434d88fb8863c68e2eb
-
SHA512
5e89ceb2ffc14a7bdb99460eb76bb908f9f800acf42135e1cc838791914326edede52e503dc11ae2acfeb885c681cc14100f9c45010e3404837dbda93210d919
-
SSDEEP
384:U/jeA8TvhjzOILdnpXtp+bMNIWNHWR9+EMQjK:Yl8TvhjpbYYhY9lXK
Malware Config
Signatures
Files
-
9fb4f020c694efa2aaf666083378cf5015db70caba118434d88fb8863c68e2eb.exe windows x86
11ccb4e69b1279ecabec8d9d7ccbf149
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
VirtualAlloc
msvcrt
memcpy
memset
user32
CreateWindowExA
LoadIconA
LoadCursorA
RegisterClassExA
gdi32
GetStockObject
advapi32
RegOpenKeyExA
Sections
.text Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.text2 Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 88B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ