Static task
static1
Behavioral task
behavioral1
Sample
9923dae7d950e0a0bdf12ee20ff8dde5e65db4c19de9228e68dadab7d461e848.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
9923dae7d950e0a0bdf12ee20ff8dde5e65db4c19de9228e68dadab7d461e848.exe
Resource
win10v2004-20220812-en
General
-
Target
9923dae7d950e0a0bdf12ee20ff8dde5e65db4c19de9228e68dadab7d461e848
-
Size
801KB
-
MD5
74c1e2007c48c7c0b14d454b06e97740
-
SHA1
29fcb10eb0ab3b29a0c9c7c01a962c62445d6fe8
-
SHA256
9923dae7d950e0a0bdf12ee20ff8dde5e65db4c19de9228e68dadab7d461e848
-
SHA512
54cce67e527f5079e9f177203fe340a89b5bc7fa924ed7309cd3fd8879c1c2937c37b3079590fa2e45738dfd1d5dcb0724bf678f2873fca0d0c2f6a097d6a771
-
SSDEEP
24576:V2LvUqIFb1jvAD/44Ea5MfVQeGXqSAqnX8oi:ML3cJjvA8Z6GV5SAqnDi
Malware Config
Signatures
Files
-
9923dae7d950e0a0bdf12ee20ff8dde5e65db4c19de9228e68dadab7d461e848.exe windows x86
e01f45858b53df776341d6d3cf2b154d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
GetPrivateProfileSectionA
lstrlenA
SetLastError
DeviceIoControl
VirtualProtectEx
GetCurrentThread
DeviceIoControl
GetProcessHeap
GetPrivateProfileIntW
CreateEventW
GetProcessVersion
DeleteFileA
TlsGetValue
GetStringTypeW
LoadLibraryW
GetDriveTypeA
HeapFree
ResumeThread
FindAtomA
CreateEventA
SuspendThread
clbcatq
ComPlusMigrate
ComPlusMigrate
SetSetupSave
CheckMemoryGates
CheckMemoryGates
CheckMemoryGates
SetupOpen
SetupOpen
ComPlusMigrate
SetupOpen
DllGetClassObject
SetSetupSave
DllGetClassObject
pdh
PdhGetLogFileTypeA
PdhAddCounterA
PdhCloseLog
PdhGetLogFileSize
Sections
.text Size: 1024B - Virtual size: 864B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 1024B - Virtual size: 1.4MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 794KB - Virtual size: 794KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
.orpc Size: 512B - Virtual size: 416B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ