Static task
static1
Behavioral task
behavioral1
Sample
9b74519e5ce0dac8fd717dd51ef878b6b94a17ba0183297d5c50dae46305c1d9.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
9b74519e5ce0dac8fd717dd51ef878b6b94a17ba0183297d5c50dae46305c1d9.exe
Resource
win10v2004-20230220-en
General
-
Target
9b74519e5ce0dac8fd717dd51ef878b6b94a17ba0183297d5c50dae46305c1d9
-
Size
3.6MB
-
MD5
6e6a58d8b15ff4310c49256f0fc09ef3
-
SHA1
1a2f2e2e76cc3b1990c97173f4a98bf4e5e81682
-
SHA256
9b74519e5ce0dac8fd717dd51ef878b6b94a17ba0183297d5c50dae46305c1d9
-
SHA512
ae621b04fff22356e4ba07e3c9f8f99a3ef425f642755b152ff9f4972388b5d69cb9f7b9ffa2382f9e9e5f53cc996fa00dd40cc6886144b176708ed9cc2d3967
-
SSDEEP
49152:9NrYtbAbbc0CGVHCcOxqoppLXCIYrKMtlBdukXK6f/8LYFlNKVZ+5L+/JZ5unxKW:9rbc0dxOfbCIYflBduQn8JunxyOJ2U
Malware Config
Signatures
Files
-
9b74519e5ce0dac8fd717dd51ef878b6b94a17ba0183297d5c50dae46305c1d9.exe windows x86
f427ec01d51b9c584dcb332a494f35bf
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree
oleaut32
SysFreeString
advapi32
RegQueryValueExA
user32
GetKeyboardType
gdi32
UnrealizeObject
version
VerQueryValueW
mpr
WNetGetConnectionA
ole32
CreateStreamOnHGlobal
comctl32
_TrackMouseEvent
shell32
ShellExecuteA
comdlg32
GetOpenFileNameA
wsock32
WSACleanup
gdiplus
GdipSetStringFormatLineAlign
Sections
.text Size: 2.7MB - Virtual size: 6.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 15KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE