AllocConsole
Static task
static1
Behavioral task
behavioral1
Sample
9ca48d49a500acadbdf5832846f904187bd4952e25559e8de3d1209ffba4563b.dll
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
9ca48d49a500acadbdf5832846f904187bd4952e25559e8de3d1209ffba4563b.dll
Resource
win10v2004-20230220-en
General
-
Target
9767573893.zip
-
Size
1KB
-
MD5
0c2ca041f14f0c63e8d310f8ded7e91b
-
SHA1
e0da3e4f25b1e0e57275eb7f0e5deae895c7b19d
-
SHA256
8688b069f1a4467b3f278d11f7fd968d8f241e74246631cf38349ffc98ab9c62
-
SHA512
63f7035e7e2b3b4662e4fb3625ae449a8dce04da07e616b165c6a2029909b5dd89efeb75df8eaf1eed2d3983cc0ee37b29e3c78f048e4a77a42549acd1ec6cc3
Malware Config
Signatures
Files
-
9767573893.zip.zip
Password: infected
-
9ca48d49a500acadbdf5832846f904187bd4952e25559e8de3d1209ffba4563b.dll windows x86
Password: infected
abf9ad8c353cd0e54bdd516e13c8c9e4
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
CreateMutexW
ReleaseMutex
SleepEx
VirtualAlloc
WaitForSingleObjectEx
Exports
Exports
Sections
AUTO Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.idata Size: 512B - Virtual size: 184B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size:
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size:
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ