Static task
static1
Behavioral task
behavioral1
Sample
f9b70ffa443874780bd4a1ad3f1e21ba44f248cc594b6abb241b2d5399a5bdd8.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
f9b70ffa443874780bd4a1ad3f1e21ba44f248cc594b6abb241b2d5399a5bdd8.exe
Resource
win10v2004-20220901-en
General
-
Target
f9b70ffa443874780bd4a1ad3f1e21ba44f248cc594b6abb241b2d5399a5bdd8
-
Size
66KB
-
MD5
917f1788bd21b4b9d63f13f08e05e997
-
SHA1
527f4fcf698a8cd33ae4ca764ba234b099b2fa26
-
SHA256
f9b70ffa443874780bd4a1ad3f1e21ba44f248cc594b6abb241b2d5399a5bdd8
-
SHA512
5bca7af6367f32d36a6cdd994730028a5b63be520c9030578a5e9fb0257ad28a6f721a458c1925a37d3a8aa8775abada7826bd13859b981c6fc34cd4183750bb
-
SSDEEP
1536:h818s/ugOTAdnx8F6C+BO1y2CCoJ2g1WJVS883nEP:KxH+AdKDmaFoJ20Wm3E
Malware Config
Signatures
Files
-
f9b70ffa443874780bd4a1ad3f1e21ba44f248cc594b6abb241b2d5399a5bdd8.exe windows x86
fa3d8adf8575295f56f86d91836aee29
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCommandLineA
ReadFile
WriteConsoleOutputW
VirtualProtectEx
ExitProcess
user32
GetTopWindow
Sections
.text Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 512B - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 59KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.sect1 Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ