Static task
static1
Behavioral task
behavioral1
Sample
9f463f03dc65c02f92305d0f84c9aa240ca26b4c99311a37f866ee3b6fd86938.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
9f463f03dc65c02f92305d0f84c9aa240ca26b4c99311a37f866ee3b6fd86938.exe
Resource
win10v2004-20221111-en
General
-
Target
9f463f03dc65c02f92305d0f84c9aa240ca26b4c99311a37f866ee3b6fd86938
-
Size
808KB
-
MD5
4d501e4feb06652799f4e3ba5862fd52
-
SHA1
924541771400bd03c6551cad9e6fd515770ef91c
-
SHA256
9f463f03dc65c02f92305d0f84c9aa240ca26b4c99311a37f866ee3b6fd86938
-
SHA512
bbeb84d6142dc5cb385a1e5adb9c424c411a918faf1782cad362733e9f37c2bd6b218e636131c27f3b30750565da22fcdd41fb7bf206561fbba8e7e118017915
-
SSDEEP
12288:UIf5PyTrj5G82cx7o4lQCOY7BPWH0TVcN/l9fGlwnyyu0J4/VEB5v8FPFb6n/hF+:Byj5Gj8nlvOwPWUh6LSv1/mBxIpcbrf
Malware Config
Signatures
Files
-
9f463f03dc65c02f92305d0f84c9aa240ca26b4c99311a37f866ee3b6fd86938.exe windows x86
a2040fe3e3e5647394e93a7e3895e595
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetLastError
GetComputerNameA
ExitThread
OpenFile
DeleteFileW
CopyFileExW
SetLastError
DeleteAtom
OpenFileMappingA
GetFileTime
FindAtomA
CreateDirectoryA
FindFirstFileA
GlobalFree
WriteFile
GetComputerNameA
DeleteFileA
OpenFileMappingA
CopyFileW
GetStdHandle
DeleteAtom
ReadConsoleA
CreateProcessA
Sleep
GlobalFree
GetCPInfo
CopyFileExA
GetStdHandle
OpenFileMappingA
ReadConsoleA
CreateProcessA
GlobalFree
CreateThread
OpenFile
GetCPInfo
FindAtomA
DeleteFileW
Sleep
CopyFileExW
ReadFile
FindFirstFileA
GetFileSize
GetLastError
CopyFileA
GetCPInfo
CreateThread
DeleteAtom
ReadConsoleA
CopyFileExW
WriteFile
GetCommandLineA
DeleteFileA
ExitThread
GetConsoleMode
OpenFile
Sleep
FindAtomA
CopyFileW
GetStdHandle
ReadConsoleA
GetFileSize
GlobalFree
DeleteFileW
FindFirstFileA
GetCPInfo
GetConsoleMode
Sleep
CreateThread
CopyFileExW
GetFileTime
OpenFileMappingA
ReadFile
OpenFile
Sections
CODE Size: 712KB - Virtual size: 710KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.itext Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.REloc Size: 8KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
edata Size: 24KB - Virtual size: 3.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: 4KB - Virtual size: 52B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 40KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ