Static task
static1
Behavioral task
behavioral1
Sample
9924fb75895c8c57fffd30f9b4fa5232489a7d3fbb406ed9e837285d817bb1ee.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
9924fb75895c8c57fffd30f9b4fa5232489a7d3fbb406ed9e837285d817bb1ee.exe
Resource
win10v2004-20221111-en
General
-
Target
9924fb75895c8c57fffd30f9b4fa5232489a7d3fbb406ed9e837285d817bb1ee
-
Size
1.8MB
-
MD5
7533e9635bd3bde79ab0e536141db4f2
-
SHA1
9cab743d8779cca9ba00699ee72bf4909c451538
-
SHA256
9924fb75895c8c57fffd30f9b4fa5232489a7d3fbb406ed9e837285d817bb1ee
-
SHA512
de4c3306fa169956caefa9b594e177d52b570cb9a7f8ac5a3a44628d9a54af37aa4986e969f3b03529bdaecc11fd9b30a2f5bc1c448256817b66caeab1cfb70a
-
SSDEEP
49152:ksqqXsZfRmnxoMciG9NtET0JjZw4G5wF:PqIg/tET0hq7qF
Malware Config
Signatures
Files
-
9924fb75895c8c57fffd30f9b4fa5232489a7d3fbb406ed9e837285d817bb1ee.exe windows x86
8db3957d80bcf6a2f6fa0a1de1a780a8
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FindAtomA
CopyFileA
GetCommandLineA
GetFileTime
GetConsoleMode
CopyFileW
GetLastError
DeleteAtom
CopyFileExA
ReadConsoleW
GetCPInfo
OpenFile
GetFileSize
Sleep
ReadConsoleA
DeleteFileW
DeleteFileW
GlobalFree
CopyFileA
GetStdHandle
FindFirstFileA
GetComputerNameA
ReadConsoleA
GetFileTime
ReadConsoleW
ExitThread
Sleep
WriteFile
ReadFile
DeleteFileA
CreateThread
CreateProcessA
GetFileSize
FindAtomA
GetCommandLineA
OpenFile
GetFileTime
GetConsoleMode
ReadConsoleW
CopyFileW
ReadConsoleA
CopyFileExA
CreateThread
FindAtomA
CopyFileExW
GlobalFree
ReadFile
DeleteFileW
WriteFile
GetCommandLineA
CopyFileExA
GetLastError
CopyFileA
FindFirstFileA
CreateDirectoryA
ReadConsoleA
CopyFileExW
DeleteFileW
Sleep
GetCPInfo
GetComputerNameA
ExitThread
DeleteFileA
FindAtomA
WriteFile
GetFileSize
CreateThread
GetFileSize
CreateDirectoryA
Sleep
CreateProcessA
CopyFileA
ExitThread
CopyFileExW
FindFirstFileA
GetComputerNameA
CreateThread
GlobalFree
DeleteFileW
WriteFile
GetStdHandle
CopyFileExA
GetConsoleMode
Sleep
CreateProcessA
OpenFile
CreateDirectoryA
CreateThread
CopyFileExW
CopyFileA
GetLastError
CopyFileW
GetCommandLineA
GetFileTime
GetComputerNameA
GlobalFree
GetCPInfo
GetStdHandle
ReadFile
Sections
.init Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.itext Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 24KB - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: 4KB - Virtual size: 90B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 4KB - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ