Static task
static1
Behavioral task
behavioral1
Sample
a9303a8a82d9de52fb9a73649fe943ab3be8078a2e3c9f556216828a6b18431f.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
a9303a8a82d9de52fb9a73649fe943ab3be8078a2e3c9f556216828a6b18431f.exe
Resource
win10v2004-20220812-en
General
-
Target
a9303a8a82d9de52fb9a73649fe943ab3be8078a2e3c9f556216828a6b18431f
-
Size
168KB
-
MD5
0b098b74ab6f3701553eb4b6938b17b2
-
SHA1
8bc18cb547b6ad5da5d80d488fbfafb6760fa402
-
SHA256
a9303a8a82d9de52fb9a73649fe943ab3be8078a2e3c9f556216828a6b18431f
-
SHA512
ec6068fe62b5c3078b187d033327da8da3fdc9f6c1e25271604a97686c144e8af9fed7a2fb2b8ded69357c3b010df9be8ba06c226cf2f281d248a108cff2ef5d
-
SSDEEP
1536:mGrF46CScEO8UDuiRilgsA9To2OX8hOwftdjy2Y4xNOJk8uYFLFAVySpEhm/bc+:946DFOJDVRF7oo8gdjyONOcqSTpAOb
Malware Config
Signatures
Files
-
a9303a8a82d9de52fb9a73649fe943ab3be8078a2e3c9f556216828a6b18431f.exe windows x86
5fd131ab14e6111c576454678b2c20c1
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateThread
CopyFileExW
OpenFileMappingA
CreateMutexW
CopyFileW
DeleteFileA
FindResourceW
AddAtomA
CreateDirectoryA
GlobalFree
GetStdHandle
WriteFile
CopyFileA
DeleteFileW
ReadConsoleA
GetComputerNameA
FindResourceA
CopyFileExA
OpenFile
GetConsoleMode
CopyFileW
CreateProcessA
ReadConsoleW
OpenFile
GetStdHandle
GetFileTime
AddAtomA
DeleteFileA
OpenFileMappingA
GetComputerNameA
FindResourceA
CreateFileA
CopyFileExW
CreateMutexA
ReadConsoleA
CopyFileExA
CreateDirectoryA
WriteFile
GetConsoleMode
GetFileTime
OpenFileMappingA
CreateMutexA
GlobalFree
CreateDirectoryA
ReadConsoleW
DeleteFileA
FindResourceA
FindFirstFileA
OpenFile
CreateProcessA
CreateThread
CreateMutexW
CopyFileA
WriteFile
FindResourceW
GetFileTime
CopyFileExA
CreateThread
CreateFileA
OpenFileMappingA
GetFileSize
CreateProcessA
CreateMutexA
GlobalFree
AddAtomA
CreateDirectoryA
GetComputerNameA
GetStdHandle
ReadConsoleA
ReadFile
CopyFileExW
Sections
.init Size: 108KB - Virtual size: 104KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
DATA Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.edata Size: 8KB - Virtual size: 2.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: 4KB - Virtual size: 67B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 536B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ