Static task
static1
Behavioral task
behavioral1
Sample
9140c17df324ebe66980c29e12bf73f9cd08e8196e6dd4c9dc682a83ebc0099d.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9140c17df324ebe66980c29e12bf73f9cd08e8196e6dd4c9dc682a83ebc0099d.exe
Resource
win10v2004-20220812-en
General
-
Target
9140c17df324ebe66980c29e12bf73f9cd08e8196e6dd4c9dc682a83ebc0099d
-
Size
8KB
-
MD5
9141384f3e3c5e4ecb16894f14f1e557
-
SHA1
bd4b9625473e881f50188f8816e9f07ec6c38bb1
-
SHA256
9140c17df324ebe66980c29e12bf73f9cd08e8196e6dd4c9dc682a83ebc0099d
-
SHA512
1a93732071f0dc5b61cfed043edfc207f0d7896415c6d244ae8398d5b0f862c91ee6cd7e7b868b0abc7d51fe0d8b58991a555e52abed76118b0abb15cc1cb5a9
-
SSDEEP
96:nP8y/KK97PMgbUkpURUKLa08U6XJPhxZ5GH+fa3:nlFJYkGp6XvO3
Malware Config
Signatures
Files
-
9140c17df324ebe66980c29e12bf73f9cd08e8196e6dd4c9dc682a83ebc0099d.exe windows x86
5ccf02cc846e03199849e329d0502404
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
VirtualProtect
VirtualFree
lstrcmpiA
GetStdHandle
VirtualLock
WriteConsoleA
Beep
CloseHandle
ExitProcess
GetCurrentProcessId
GetProcAddress
VirtualUnlock
GetSystemInfo
GetVersionExA
LoadLibraryExA
LocalFree
Sleep
VirtualAlloc
user32
FindWindowA
wsprintfA
GetWindowThreadProcessId
ntdll
NtUnmapViewOfSection
NtQuerySystemInformation
NtOpenSection
NtMapViewOfSection
advapi32
SetSecurityInfo
SetEntriesInAclW
GetSecurityInfo
Sections
CODE Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ